While the Windows Command Prompt is useful for
creating scripts and batch files that can be run by
Windows, these script and batch files can also be
created and run by users for malevolent purposes
too.
Like the Windows Registry it isn't always wise to
allow a user, other than the administrator, to have
access to the Command prompt.
For this reason it is sometimes wise to simply
disable this feature, thus preventing any
unauthorised access to the Command prompt Window.
To disable access to the Command Prompt proceed
as follows:
Please Note: You must be an
administrator to enable this setting as you will be
editing the Windows 8/8.1 Pro Group Policy.
-
Right click on the Start
button and, from the drop down menu, select the
Run option.
- In the Run dialogue box,
type: gpedit.msc and
click the OK button.
Fig: 8.28.1 Type gpedit.msc
into the Run box and press OK
- When the Group Policy Editor
opens, navigate to: User Configuration
then Administrative Templates
and finally System.
- Now look in the Right hand Pane
of the Group Policy Editor and
double click on the Prevent access to
the Command Prompt option.
Fig: 8.28.2 Double click on
the Prevent access to the Command Prompt option
- When the Prevent access to the
Command Prompt window opens, Click on
the Enabled option.
Fig: 8.28.3 Click the enabled
radio button followed by OK
- Finally click the OK button
to exit the Group Policy Editor.
- Now if a user attempt to open the
Command Prompt window he/she will see
the following warning message. (see Fig: 8.30.4
below)
Fig:8.28.4 A message appears
informing the user that the Command Prompt has
been disabled