Restrict access to WinNT Cmd Line 1

[SteveAudus]

Our students have found a way to access the CMD line,
even though we have taken it off the startmenu.

Is there any way using Policy Editor to stop them accessing it?

Steve Audus
Chaucer Community School
Sheffield, UK

http://www.chaucer.sheffield.sch.uk

http://www.educationinternet.co.uk

 

[Required]

You can implement some restrictions from the System Policy Editor.
Choose File->Open Registry, then Local User and there you can have a look at Shell, Windows NT Shell and System. All three contain a "Restrictions" element with a few possibilities.
Restricting access to the command line is difficult because you can get it through "Run" in the startmenu, through the explorer, throught the file open/save dialog of any application, ...
Several applications also include a menu that allows to escape to the command line.

 

[SteveAudus]

We Restrict access to explorer with no right click,
Run is removed from the start menu.
But still they get to CMD line.

Any other suggestions?

Steve Audus

http://www.chaucer.sheffield.sch.uk

http://www.educationinternet.co.uk

 

[Required]

You can remove the execution permission on cmd.exe for these users (assuming the file is on a NTFS partition).

 

[1sexypapi]

you can remove the execute permissions for everyone group on command.exe or take them right out of having any permissions to this, another way is to rename cmd.exe to something else that you wil remember assuming that you are using NTFS