+ Post New Thread
Results 1 to 10 of 10
Windows Thread, block students from using command prompt in Technical; Hi All, I am looking for a way to stop students from using command prompt. I can block command prompt ...
  1. #1
    bencole's Avatar
    Join Date
    Nov 2013
    Posts
    148
    Thank Post
    85
    Thanked 8 Times in 8 Posts
    Rep Power
    4

    block students from using command prompt

    Hi All,

    I am looking for a way to stop students from using command prompt. I can block command prompt all together by GPO User Configuration\Administrative Templates\System but a technet article says not to do this if you are using logon, logoff, startup, or shutdown batch file scripts. (http://technet.microsoft.com/en-us/library/cc975912.aspx)

    This is a setting that has always been set in the schools I have worked in so never had to configure this myself.

  2. #2
    AlexB's Avatar
    Join Date
    Jul 2006
    Location
    Warwickshire
    Posts
    417
    Thank Post
    40
    Thanked 51 Times in 43 Posts
    Rep Power
    26
    News to me. We have "Prevent access to the command prompt" set and scripts run at login/logoff

    If you really want fun. save this is a .hta and .htm file (open the later in IE) and then work out how to block it

    HTML Code:
    <html>
    	<head>
    		<title>Bubbles</title>
    		<script type="text/javascript">
    			var a = new ActiveXObject( "WScript.Shell" );
    			a.run( "command.com" );
    		</script>
    		<style type="text/css">
    			
    		</style>
    	</head>
    	<body>
    		
    	</body>
    </html>

  3. #3

    synaesthesia's Avatar
    Join Date
    Jan 2009
    Location
    Northamptonshire
    Posts
    6,513
    Thank Post
    627
    Thanked 1,173 Times in 900 Posts
    Blog Entries
    15
    Rep Power
    524
    Ditto, everything runs just fine including a few cmd based scripts at logon.

  4. #4

    Norphy's Avatar
    Join Date
    Jan 2006
    Location
    Harpenden
    Posts
    2,584
    Thank Post
    59
    Thanked 371 Times in 287 Posts
    Blog Entries
    7
    Rep Power
    134
    Quote Originally Posted by bencole View Post
    Hi All,

    I am looking for a way to stop students from using command prompt. I can block command prompt all together by GPO User Configuration\Administrative Templates\System but a technet article says not to do this if you are using logon, logoff, startup, or shutdown batch file scripts. (http://technet.microsoft.com/en-us/library/cc975912.aspx)

    This is a setting that has always been set in the schools I have worked in so never had to configure this myself.
    By the looks of it, that article relates to Windows 2000. As others have said, you should be able to run login/out scripts and disable the command prompt with newer versions of Windows if you so desire.

    Whether it's worth the effort or not is another question.

  5. #5
    dwhyte85's Avatar
    Join Date
    Mar 2009
    Location
    Berkshire
    Posts
    1,235
    Thank Post
    162
    Thanked 153 Times in 138 Posts
    Rep Power
    104
    change comspec variable, that'll make it a bit more difficult maybe.

  6. #6

    Ephelyon's Avatar
    Join Date
    Aug 2008
    Location
    Cheshire, England
    Posts
    1,849
    Thank Post
    351
    Thanked 392 Times in 249 Posts
    Rep Power
    162
    You can set that setting just fine, just don't set disable script processing to Yes as well if you still want to run logon scripts and etc.

  7. #7

    Join Date
    Feb 2013
    Posts
    154
    Thank Post
    2
    Thanked 17 Times in 12 Posts
    Rep Power
    42
    This reminds me of last week (sort of related so hang in there)

    Went to pay the council tax - but there was only one window open and a big queue. So went and sat a at bank of machines to "play" until the line shortened.
    First off I kicked the Dell as I sat down (they were sat on the floor) - then managed to get the browser to leave the council's site. then thought "oooh could do with a calculator"
    Start programs - acces... oh no accessories.
    never mind - typed cmd (thinking that'll never work) hit return
    up it came ..... "Hmmm what else can I do"

    after 20-25 mins of "playing" I suddenly thought about the parking meter and left.

    I wont bother telling the council - I enjoyed my bit of fun too much

  8. #8

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,345
    Thank Post
    242
    Thanked 1,602 Times in 1,278 Posts
    Rep Power
    346
    I still configure this policy today (even on modern 2008 R2 / 7 networks) and it works exactly as it did since Windows 2000.

    Even if someone cleverly creates a shortcut to cmd.exe, it'll just inform them it's been disabled by their administrator.

    Set the policy 'Prevent access to the command prompt', to Enabled, then select No from the drop down menu and that's it. The only time I deploy using scripts these days is the wireless key, using the netsh wlan command.

  9. #9


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    7,059
    Thank Post
    232
    Thanked 926 Times in 795 Posts
    Rep Power
    309
    Quote Originally Posted by Michael View Post
    I still configure this policy today (even on modern 2008 R2 / 7 networks) and it works exactly as it did since Windows 2000.

    Even if someone cleverly creates a shortcut to cmd.exe, it'll just inform them it's been disabled by their administrator.

    Set the policy 'Prevent access to the command prompt', to Enabled, then select No from the drop down menu and that's it. The only time I deploy using scripts these days is the wireless key, using the netsh wlan command.
    does that block powershell as well?

  10. #10

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,345
    Thank Post
    242
    Thanked 1,602 Times in 1,278 Posts
    Rep Power
    346
    Quote Originally Posted by sted View Post
    does that block powershell as well?
    No as Powershell is powershell.exe rather than cmd.exe. You could create a GPO to block it, or rename it in: C:\Windows\System32\WindowsPowerShell\v1.0 for example.



SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 7
    Last Post: 26th March 2014, 06:25 PM
  2. Net Use command prompt vs Net Use bat file
    By spudgun in forum Windows
    Replies: 2
    Last Post: 23rd March 2012, 08:32 AM
  3. Replies: 3
    Last Post: 21st March 2012, 01:10 PM
  4. Prevent Student Access To Command Prompt
    By DaveP in forum How do you do....it?
    Replies: 13
    Last Post: 21st March 2007, 12:37 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •