Disabling the command line interface

Posted on 2004-11-09
Last Modified: 2010-04-14
How do I disable the command line interface from a user.
Question by:Gordan41
    LVL 10

    Accepted Solution

    You can prevent the user using cmd.exe :

    To prevent the use of Start / Run
    Start / Run / gpedit.msc
    Go to User Configuration / Administrative Templates / Start Menu & Taskbar /
     Remove Run Menu from Start Menu.

    You can also find : User Configuration / Administrative Templates / System /
     Prevent access to the command prompt.

    I have checked on a XP machine.
    I suppose you can find the same settings.
    LVL 15

    Expert Comment

    Group Policy!

    User Config > Admin Templates > System > Prevent Access to the Command Prompt
    User Config > Admin Templates > Start Menu and Taskbar > Remove Run from Start Menu (you'll need this!)

    lemme know if  it's local or domain, system wide or specified user if you need to know how to apply it...

    LVL 15

    Expert Comment

    lol. too slow yet again...

    LVL 25

    Expert Comment

    actually the only way to totally disable it is to remove the cmd.exe file (or change permissions on it).... if you dont to that any user can simply browse to that file and run it.  It is located at C:\WINDOWS\system32

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Highfive Gives IT Their Time Back

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
    Password hashing is better than message digests or encryption, and you should be using it instead of message digests or encryption.  Find out why and how in this article, which supplements the original article on PHP Client Registration, Login, Logo…
    It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now