Data type


Default value


1 | 2

(Not in registry)


Determines whether the user can run the interactive command prompt, Cmd.exe, and determines whether batch files (.cmd and .bat) can run while the user is logged on.

This entry stores the setting of the Disable the command prompt Group Policy. Group Policy adds this entry to the registry when you enable the policy. If you disable the policy or set it to Not configured, Group Policy deletes this entry from the registry.

When this entry appears in the registry, users cannot run Cmd.exe. If a user tries to open a command window, the system displays a message explaining that a policy prevents the action.



(Not in registry.)

The policy is not configured. Users can run Cmd.exe, and the system can run batch files.


The policy is enabled and set to Yes. Users cannot run Cmd.exe, but the system can run batch files.


The policy is enabled and set to No. Users cannot running Cmd.exe, and the system cannot run batch files.

Change method

To change the value of this entry, use Group Policy. This entry corresponds to the Disable the command prompt Group Policy (User Configuration\Administrative Templates\System).

Tip Image Tip

For detailed information about particular Group Policy settings, see the Windows 2000 Resource Kit Group Policy Reference.

For general information about Group Policy, see Windows 2000 Server Help or Windows 2000 Professional Help.

To see a table associating policies with their corresponding registry entries, see the Group Policy Registry Table .

Caution Image Caution

Do not prevent the computer from running batch files if the computer uses logon, logoff, startup, or shutdown batch file scripts, or if the user uses Terminal Services.