Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


How to disable CTRL-Z in Windows Telnet Server

Posted on 2011-04-21
Medium Priority
Last Modified: 2012-05-11
We run a home-made commande line applications that is executed when someone logs on our telnet server on Windows Server 2003 (we call this .EXE from the login.cmd file).

The user logs with his NT account (he is part of the Telnet Clients Groups). When it logs, our application launches. The user can disconnect by choosing an option in our application. This close the .EXE and the connection. But if the user does CTRL-Z, it ask to terminate the batch job. The user then say Yes and then he has access to the server.

How do we disable CTRL-Z ?
Question by:Lanticrogers

Accepted Solution

AdamJur earned 1000 total points
ID: 35461437
You cannot directly modify the behavior of the batch job/cmd prompt.

I have a similar environment where a user can create batch jobs however I have disabled access to the cmd prompt through group policy. During a quick test a moment ago I created a batch [dir c:\ /s] and saved to desktop. As it ran I pressed CTRL+C [not Z] and chose YES to cancel batch job. It immediately stated I do not have access and terminated the access to cmd.exe

You can modify this via group policy:
User Configuration - System - Prevent Access to the command prompt.

You should test this change in a dev environment first and/or change the ACL of the GPO to apply to certain users.

I have many offshore developers and have locked down the Terminal Servers extremely well, and always try defeating my own changes and have it now where security is balanced for their job function. Hopefully this can lead you in a better direction for securing your system.


Author Closing Comment

ID: 35490917
Thanks I will give it a try

Featured Post


Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
Back in July, I blogged about how Microsoft's new server pricing model, combined with the end of the Small Business Server package, would result in significant cost increases for many small businesses (see SBS End of Life: Microsoft Punishes Small B…
Integration Management Part 2
How can you see what you are working on when you want to see it while you to save a copy? Add a "Save As" icon to the Quick Access Toolbar, or QAT. That way, when you save a copy of a query, form, report, or other object you are modifying, you…

580 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question