Prevent Access to the Command Prompt

Prevents users from running the interactive command prompt, Cmd.exe. This setting also determines whether batch files (.cmd and .bat) can run on the computer.

If you enable this setting and the user tries to open a command window, the system displays a message explaining that a setting prevents the action.

Note: Do not prevent the computer from running batch files if the computer uses logon, logoff, startup, or shutdown batch file scripts, or for users that use Remote Desktop Services.

Disable the Command Prompt

1. Type gpedit.msc in the Start menu’s search box and then press Enter.

   Note: This guide shows you how to make changes to Windows 7 using Group Policy. Group Policy is not available in Home versions of Windows 7.

2. Navigate to User Configuration, Administrative Templates, and then select System in the left column of the Group Policy editor.

   

3. Double-click Prevent access to the command prompt in the Settings section of the Group Policy editor.
4. Select Enable and then click OK to save the changes.

   

Still need help? Ask Your Computer Question Now.

Explore other guides about: Guides • Personalization • Group Policy.

Related Guides:

• Prevent Specified Programs from Running
• Prevent Users from Adding Files to the Root of their Users Files Folder
• Prevent Access to Drives from Computer
• Prevent Users from Sharing Files within Their Profile
• Prevent a User from Running the Backup Status and Configuration Program