DisableCMD
Updated: January 6, 2010
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2
HKLM\Software\Policies\Microsoft\Windows\System
| Data type | Range | Default value |
|---|---|---|
|
REG_DWORD |
0 | 1 | 2 |
0 |
Description
Stores configuration data for the policy setting Prevent access to the command prompt.
| Value | Meaning | ||
|---|---|---|---|
|
0 |
Allows users access to the command prompt. |
||
|
1 |
Prevents users from running the interactive command prompt, Cmd.exe. This setting also restricts batch files and logon scripts (.cmd and .bat) from running on the computer.
|
||
|
2 |
Prevents users from running the interactive command prompt, Cmd.exe, but allows batch files and logon scripts to run.
|
Change Method
To change the value of this entry, use the Group Policy Object Editor (Gpedit.msc). The corresponding policy is located in Administrative Templates\System.

Caution
Tip