Disable cmd.exe for standard users on Windows 7 Starter edition.

Page 1 of 2 12 LastLast

  1. Posts : 7
    Windows 7 Starter 32 bits
       #1

    Disable cmd.exe for standard users on Windows 7 Starter edition.


    Hello.
    I have a machine running Windows 7 Starter edition. I would like to block access to cmd.exe.
    Is there a way to accomplish this? (Starter edition does not have gpedit.msc)
      My Computer


  2. Posts : 3,772
    win 8 32 bit
       #2

    Welcome to the forum the simple way would be move it from the path so it wouldn't run unless they knew were it was or just rename it
      My Computer


  3. Posts : 7
    Windows 7 Starter 32 bits
    Thread Starter
       #3

    Thank you for your reply.

    I tried to rename it and to move it to a different location (logged in as an administrator and also in safe mode) but I get this error:
      My Computer


  4. Posts : 2,464
    Windows 7 Ultimate x64
       #4

    Why do you want to do that? What do you plan to accomplish?
    It seems, at most, security though obscurity (hence, no security at all) and what is done though cmd can trivially be done by many other means.
      My Computer


  5. Posts : 721
    Windows 10, Windows 8.1 Pro, Windows 7 Professional, OS X El Capitan
       #5

    The Prevent access to the command prompt policy is related to the DisableCMD DWORD registry value, located at,
    Code:
    HKCU\Software\Policies\Microsoft\Windows\System
    Its would-be default data value is 0. Set its value to 2 to disable the command prompt program. Set its value to 1 to disable the command prompt and its associated script files (.bat and .cmd).

    Changes to this registry value will only affect the user of which the change was applied, so you will have to repeat the change for each user as required. Altering the respective HKLM entry does not seem to do anything, i.e., it won’t disable the command prompt for all users.


    To disable PowerShell, the only option (only elegant option at least) is to configure the Don't run specified Windows Applications policy. This of course requires group policy.
      My Computer


  6. Posts : 25,847
    Windows 10 Pro. 64/ version 1709 Windows 7 Pro/64
       #6

    Okay folks I'm confused.

    I'm of the understanding that only users with administrator privileges can use CMD Prompt.
    If I'm correct all other users should be quest without administrator privileges.

    Please unconfuse me.

    Jack
      My Computer


  7. Posts : 2,464
    Windows 7 Ultimate x64
       #7

    Layback Bear said:
    I'm of the understanding that only users with administrator privileges can use CMD Prompt.
    If I'm correct all other users should be quest without administrator privileges.
    Anyone can run a command prompt, it's just one more program and it will run no matter what access level the user has, it's a very common for standards to use it in fact. Of course, like every software, it's restricted in what it can do by the current privileges, so a non-admin might get some "access denied" when it runs an admin-only program within cmd.

    Just try it without elevating and it will just work. Modifying anything in your profile will work, but for example creating a file in the windows folder will fail (requires admin), exactly the same as Windows Explorer for instance. Elevating it will allow unrestricted access to the whole system.

    Unconfused? Or confused even more?
      My Computer


  8. Posts : 25,847
    Windows 10 Pro. 64/ version 1709 Windows 7 Pro/64
       #8

    Thank you Alejandro85.

    That helps.
    I am always the only user on any of my computers so I never tried using CMD Prompt as a Guest.
    My understanding has been wrong for a long time.

    Thank you for your guidance.
      My Computer


  9. Posts : 7
    Windows 7 Starter 32 bits
    Thread Starter
       #9

    Alejandro85 said:
    Why do you want to do that? What do you plan to accomplish?
    It seems, at most, security though obscurity (hence, no security at all) and what is done though cmd can trivially be done by many other means.
    Hello, I'm trying to accomplish this: Command Prompt - Enable or Disable

    The only problem is that the Starter edition of W. 7 presents the aforementioned limitation.
      My Computer


  10. Posts : 7
    Windows 7 Starter 32 bits
    Thread Starter
       #10

    Pyprohly said:
    ...Changes to this registry value will only affect the user of which the change was applied, so you will have to repeat the change for each user as required. Altering the respective HKLM entry does not seem to do anything, i.e., it won’t disable the command prompt for all users.


    To disable PowerShell, the only option (only elegant option at least) is to configure the Don't run specified Windows Applications policy. This of course requires group policy.
    Thank you very much for your reply, my friend.
    I thought there might have been a way to disable command prompt for all users. Too bad, I'll have to alter the registry for each account accordingly, then.
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 21:30.
Find Us