Login script to change ntfs permissions on cmd.exe

[Kyle]

Command Post

In relation to the above post, I have manually set deny permissions on cmd.exe and command.com for the pupils and it solves the problem above.

Is there a vbscript that can be run on login script that changes the permissions on this file?

[webman]

You might want to investigate the usage of cacls.exe.

[Ric_]

You will need to use a startup script so that your script runs with sufficient priviledges.

Cacls is the way to go though

[ajbritton]

Can't you do this through Group Policy under Computer Config, Windows Settings, Security Settings, File System, then add the path to the file/folder you want to affect and set the required permissions?

[tosca925]

Can't you do this through Group Policy under Computer Config, Windows Settings, Security Settings, File System, then add the path to the file/folder you want to affect and set the required permissions?

Yes you can, we do this with certain machines in certian OU's who have software installed that mey need to write to the C:\windows\temp folder.