Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Disable cmd.exe for standard users on Windows 7 Starter edition.

22 Oct 2016   #11
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

You can create the following registry entry:

Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmd.exe]
"Debugger"="\"C:\\windows\\system32\\cmd.exe /c exit 0\""
Disable cmd.exe for standard users on Windows 7 Starter edition.-registry-editor.jpg
That basically will tell cmd.exe to simply exit whenever it runs.

I,' not sure that it's a good idea though. What if cmd.exe needs to run when installing software for example? Well it won't be able to unless you delete the reg.




My System SpecsSystem Spec
.
23 Oct 2016   #12
meprett

Windows 7 Starter 32 bits
 
 

Thank you so much for your reply, Callender. That looks like it might solve the issue. I'll try to implement it and see how it goes.
My System SpecsSystem Spec
27 Oct 2016   #13
Pyprohly

Windows 10, Windows 8.1 Pro, Windows 7 Professional, OS X El Capitan
 
 

Wow, Callendar, I didn’t know about that key and that’s a very clever suggestion. Though your demonstration of the key’s usage doesn’t make much sense…

If the Debugger value’s data is,
Code:
"C:\windows\system32\cmd.exe /c exit 0"
then you’re saying, whenever cmd is invoked, execute the following command string instead,
Code:
"C:\windows\system32\cmd.exe /c exit 0" C:\windows\system32\cmd.exe
Which doesn’t make sense because the path “C:\windows\system32\cmd.exe /c exit 0” won’t ever exist, and as a result Windows will report the following message upon launching cmd each time, does it not?

Disable cmd.exe for standard users on Windows 7 Starter edition.-cmd-path-not-found.png


This is great news though. By taking advantage of this registry value, we can replicate the behaviour of the Don't run specified Windows Applications policy almost perfectly, for any application, without the need of group policy, i.e., with the following Debugger implementation,
Code:
"Debugger"="mshta.exe vbscript:code(close(MsgBox(\"This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator.\",16,\"Restrictions\")))"


My System SpecsSystem Spec
.

27 Oct 2016   #14
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

Quote   Quote: Originally Posted by Pyprohly View Post

This is great news though. By taking advantage of this registry value, we can replicate the behaviour of the Don't run specified Windows Applications policy almost perfectly, for any application, without the need of group policy, i.e., with the following Debugger implementation,
Code:
"Debugger"="mshta.exe vbscript:code(close(MsgBox(\"This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator.\",0,\"Restrictions\")))"
Yes your suggestion is way better. Mine was intended to allow the debugger to launch cmd.exe with exit status 0. That just tells cmd.exe to exit as soon as it's launched. However I'm not sure that using debugger to launch a process with the same name as the original actually works as I intended.

I got the idea from here:

How to block applications and toolbar installers

Basically I actually use that registry key to block any desired process by name from ever running.
My System SpecsSystem Spec
27 Oct 2016   #15
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

Quote   Quote: Originally Posted by Pyprohly View Post
This is great news though. By taking advantage of this registry value, we can replicate the behaviour of the Don't run specified Windows Applications policy almost perfectly, for any application, without the need of group policy, i.e., with the following Debugger implementation,
Code:
"Debugger"="mshta.exe vbscript:code(close(MsgBox(\"This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator.\",0,\"Restrictions\")))"
So following your advice I find that this works well for me:

Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmd.exe]
"Debugger"="mshta \"javascript:var sh=new ActiveXObject( 'WScript.Shell' ); sh.Popup( 'This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator', 10, 'Message!', 64 );close()\""
My System SpecsSystem Spec
Reply

 Disable cmd.exe for standard users on Windows 7 Starter edition.




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Windows 7 Starter Edition
Hi, I've just bought a netbook with windows 7 starter edition its a HP mini 110-3500 which i was assured by the sales assistant has a good processor (intel Atom N550) anyway it seems to be quite slow respinding to commands i.e. opening up explorer etc. My first question is do all netbooks perform...
General Discussion
Windows 7 Starter Edition
My son received as a gift a Dell Inspiron Mini 10 laptop, with pre-inatalled Windows 7 Starter Edition (according the My Computer Properties). I think he answered a kind of No to a security question (maybe related to Windows Firewall), because now he has an annoyng problem. He tries to make...
System Security
Can't boot into Windows 7 Starter edition
I bought a Samsung n130 and it came with windows 7 starter edition when I booted it up, it let me make a partition with a recovery mode so I could restore Two days ago, I installed mac osx86 on a usb drive (I don't have an external cd drive) I installed it on the other partition, the empty...
General Discussion
Windows 7 Starter Edition - Is It Really That Bad?
Well many of us here will be using the Ultimate versions of Windows 7 RC build but what about other lite versions The Cheapest version of Windows 7 (Starter Edition) has a limitation that it can't run more than three application at a time!!! ...
News
I made my user to be a Standard Users but admin disable
and now I'm stuck. I cant install some programs or drivers because the Admin user is disable. How I did it? I changed my user in the "control panel"to a "Standart User" and I used the "Local users and groups" to disable the Administrator account. How can I now get administration?:huh:
Customization


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 09:16.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App