DisableCMD

  • Article

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

HKLM\Software\Policies\Microsoft\Windows\System

Data type Range Default value

REG_DWORD

 0 | 1 | 2

0 

Description

Stores configuration data for the policy setting Prevent access to the command prompt.

Value Meaning

0

Allows users access to the command prompt.

1

Prevents users from running the interactive command prompt, Cmd.exe. This setting also restricts batch files and logon scripts (.cmd and .bat) from running on the computer.

CautionCaution
If you enable this setting and the user tries to open a command window, the system displays a message explaining that a setting prevents the action.

2

Prevents users from running the interactive command prompt, Cmd.exe, but allows batch files and logon scripts to run.

Tip

You should use this setting if you run logon, logoff, startup, or shutdown batch file scripts, or if users run Remote Desktop Services (Terminal Services).

Change Method

To change the value of this entry, use the Group Policy Object Editor (Gpedit.msc). The corresponding policy is located in Administrative Templates\System.