+ Post New Thread
Results 1 to 10 of 10
Windows Thread, block students from using command prompt in Technical; Hi All, I am looking for a way to stop students from using command prompt. I can block command prompt ...
  1. #1
    bencole's Avatar
    Join Date
    Nov 2013
    Posts
    87
    Thank Post
    58
    Thanked 2 Times in 2 Posts
    Rep Power
    2

    block students from using command prompt

    Hi All,

    I am looking for a way to stop students from using command prompt. I can block command prompt all together by GPO User Configuration\Administrative Templates\System but a technet article says not to do this if you are using logon, logoff, startup, or shutdown batch file scripts. (http://technet.microsoft.com/en-us/library/cc975912.aspx)

    This is a setting that has always been set in the schools I have worked in so never had to configure this myself.

  2. #2
    AlexB's Avatar
    Join Date
    Jul 2006
    Location
    Warwickshire
    Posts
    365
    Thank Post
    36
    Thanked 36 Times in 32 Posts
    Rep Power
    23
    News to me. We have "Prevent access to the command prompt" set and scripts run at login/logoff

    If you really want fun. save this is a .hta and .htm file (open the later in IE) and then work out how to block it

    HTML Code:
    <html>
    	<head>
    		<title>Bubbles</title>
    		<script type="text/javascript">
    			var a = new ActiveXObject( "WScript.Shell" );
    			a.run( "command.com" );
    		</script>
    		<style type="text/css">
    			
    		</style>
    	</head>
    	<body>
    		
    	</body>
    </html>

  3. #3

    synaesthesia's Avatar
    Join Date
    Jan 2009
    Location
    Northamptonshire
    Posts
    5,888
    Thank Post
    575
    Thanked 1,001 Times in 773 Posts
    Blog Entries
    15
    Rep Power
    461
    Ditto, everything runs just fine including a few cmd based scripts at logon.

  4. #4
    Norphy's Avatar
    Join Date
    Jan 2006
    Location
    Harpenden
    Posts
    2,275
    Thank Post
    51
    Thanked 280 Times in 218 Posts
    Blog Entries
    6
    Rep Power
    114
    Quote Originally Posted by bencole View Post
    Hi All,

    I am looking for a way to stop students from using command prompt. I can block command prompt all together by GPO User Configuration\Administrative Templates\System but a technet article says not to do this if you are using logon, logoff, startup, or shutdown batch file scripts. (http://technet.microsoft.com/en-us/library/cc975912.aspx)

    This is a setting that has always been set in the schools I have worked in so never had to configure this myself.
    By the looks of it, that article relates to Windows 2000. As others have said, you should be able to run login/out scripts and disable the command prompt with newer versions of Windows if you so desire.

    Whether it's worth the effort or not is another question.

  5. #5
    dwhyte85's Avatar
    Join Date
    Mar 2009
    Location
    Berkshire
    Posts
    1,218
    Thank Post
    156
    Thanked 147 Times in 132 Posts
    Rep Power
    102
    change comspec variable, that'll make it a bit more difficult maybe.

  6. #6

    Ephelyon's Avatar
    Join Date
    Aug 2008
    Location
    Cheshire, England
    Posts
    1,658
    Thank Post
    287
    Thanked 318 Times in 192 Posts
    Rep Power
    141
    You can set that setting just fine, just don't set disable script processing to Yes as well if you still want to run logon scripts and etc.

  7. #7

    Join Date
    Feb 2013
    Posts
    134
    Thank Post
    2
    Thanked 15 Times in 11 Posts
    Rep Power
    41
    This reminds me of last week (sort of related so hang in there)

    Went to pay the council tax - but there was only one window open and a big queue. So went and sat a at bank of machines to "play" until the line shortened.
    First off I kicked the Dell as I sat down (they were sat on the floor) - then managed to get the browser to leave the council's site. then thought "oooh could do with a calculator"
    Start programs - acces... oh no accessories.
    never mind - typed cmd (thinking that'll never work) hit return
    up it came ..... "Hmmm what else can I do"

    after 20-25 mins of "playing" I suddenly thought about the parking meter and left.

    I wont bother telling the council - I enjoyed my bit of fun too much

  8. #8

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,568 Times in 1,250 Posts
    Rep Power
    340
    I still configure this policy today (even on modern 2008 R2 / 7 networks) and it works exactly as it did since Windows 2000.

    Even if someone cleverly creates a shortcut to cmd.exe, it'll just inform them it's been disabled by their administrator.

    Set the policy 'Prevent access to the command prompt', to Enabled, then select No from the drop down menu and that's it. The only time I deploy using scripts these days is the wireless key, using the netsh wlan command.

  9. #9


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,583
    Thank Post
    228
    Thanked 855 Times in 734 Posts
    Rep Power
    295
    Quote Originally Posted by Michael View Post
    I still configure this policy today (even on modern 2008 R2 / 7 networks) and it works exactly as it did since Windows 2000.

    Even if someone cleverly creates a shortcut to cmd.exe, it'll just inform them it's been disabled by their administrator.

    Set the policy 'Prevent access to the command prompt', to Enabled, then select No from the drop down menu and that's it. The only time I deploy using scripts these days is the wireless key, using the netsh wlan command.
    does that block powershell as well?

  10. #10

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,568 Times in 1,250 Posts
    Rep Power
    340
    Quote Originally Posted by sted View Post
    does that block powershell as well?
    No as Powershell is powershell.exe rather than cmd.exe. You could create a GPO to block it, or rename it in: C:\Windows\System32\WindowsPowerShell\v1.0 for example.

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 7
    Last Post: 26th March 2014, 05:25 PM
  2. Net Use command prompt vs Net Use bat file
    By spudgun in forum Windows
    Replies: 2
    Last Post: 23rd March 2012, 07:32 AM
  3. Replies: 3
    Last Post: 21st March 2012, 12:10 PM
  4. Prevent Student Access To Command Prompt
    By DaveP in forum How do you do....it?
    Replies: 13
    Last Post: 21st March 2007, 11:37 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •