+ Post New Thread
Results 1 to 4 of 4
Windows 7 Thread, Block cmd.exe - warnings? in Technical; I am looking at the policy User Config -> Policies -> Admin Templates -> System -> Prevent access to the ...
  1. #1
    kennysarmy's Avatar
    Join Date
    Oct 2005
    Location
    UK
    Posts
    1,286
    Thank Post
    80
    Thanked 45 Times in 31 Posts
    Rep Power
    30

    Block cmd.exe - warnings?

    I am looking at the policy

    User Config -> Policies -> Admin Templates -> System -> Prevent access to the command prompt.

    which states:Prevents users from running the interactive command prompt, Cmd.exe. This setting also determines whether batch files (.cmd and .bat) can run on the computer.

    If you enable this setting and the user tries to open a command window, the system displays a message explaining that a setting prevents the action.

    Note: Do not prevent the computer from running batch files if the computer uses logon, logoff, startup, or shutdown batch file scripts, or for users that use Remote Desktop Services.

    I have enabled the policy and chosen No to Disable the command prompt script processing also?

    Should this cause any problems with user login scripts that set drive mappings etc?

  2. #2

    Join Date
    Jun 2010
    Posts
    198
    Thank Post
    9
    Thanked 25 Times in 24 Posts
    Rep Power
    21
    You don't say what server version your on but on windows server 2003 you might find it easier to set up path rules for bat and cmd blocking to prevent them from being run.
    Find this under
    user configuration-windows settings-security settings- software restriction policies- additional rules
    rather than blocking them via the admin templates-system

  3. #3
    kennysarmy's Avatar
    Join Date
    Oct 2005
    Location
    UK
    Posts
    1,286
    Thank Post
    80
    Thanked 45 Times in 31 Posts
    Rep Power
    30
    Server is 2003 yes.

    I've tested and the login scripts seem to still run OK.

  4. #4

    Join Date
    Jun 2010
    Posts
    198
    Thank Post
    9
    Thanked 25 Times in 24 Posts
    Rep Power
    21
    Quote Originally Posted by kennysarmy View Post
    Server is 2003 yes.

    I've tested and the login scripts seem to still run OK.
    If it works don't fix it lol..

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 3
    Last Post: 21st March 2012, 12:10 PM
  2. Block exe from USB - Again
    By jmair in forum Windows Server 2000/2003
    Replies: 2
    Last Post: 26th March 2010, 08:30 PM
  3. cmd.exe replacement w/ persistent history
    By danboid in forum Windows
    Replies: 7
    Last Post: 19th October 2008, 03:54 PM
  4. How to block .bat and .exe files
    By z4ydi in forum Network and Classroom Management
    Replies: 6
    Last Post: 12th February 2008, 02:36 PM
  5. Replies: 4
    Last Post: 23rd November 2006, 09:33 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •