removing command prompt

[Jason Pero]

I know this may sound simple. But, using group policies,
i've removed access to the cmd.exe command prompt. Which
works well, but the students keep making shortcuts to
command.com. I set the group policies to not run the
command.com file, but it is still runnable. I have
blocked access to the C drive every other way. the
command.com command prompt is my weakness. Please tell me
there is somebody who knows how to get rid of it? (aside
from deleting command.com there is nothing else i can
think of)

 

[Herb Martin]

Change the permissions on Cmd.exe and Command.com to prevent
all but (say) Admins from running them.

Admins -- FC
No one else mentioned (unless you have another specific group of users
who need access to them.)