Block users running a batch file to run command.com?
Forgive me if I sound ignorant here but I have just moved from CC3 to a vanilla Windows 2008 environment.
One thing that a friendly work experience guy has pointed out is that if he creates a batch file with command.com inside it he can run it and then have the command prompt.
Is file screening the way to go with this or is there a better solution?
I have read that with file screening the users could just rename the extension and then use it whenever! :confused: