Skip to content
November 7, 2008 / technocrawl

Prevent Access to Command Prompt in Windows

Here is a Tip for Windows Administrator!

In a Windows based Machine, getting access to command prompt will almost do aything from escalating privilege or to create any havoc in the Network and for Netowrk discovery and reconnaissance using some simple command.
Most of the Administrators are not aware of this, even most of them doesnt know what people are going to do with that basic command carp, but it is the real power of an Windows machine just by using some simple commands.
This will be quite useful for the Windows system and Network Administrator to prevent access to the command prompt.

In order to block access to command prompt, what you need to do is,

1. Click on the start menu, then click on Run and type ‘gpedit.msc’ without quotes and hit enter.
2. You will be taken to the Group Editor Policy Window.
3. Once you are there, Just move on to the following location

USER CONFIGURATION -> ADMINISTRATIVE TEMPLATES -> SYSTEM ->

On the Right hand side, look for something that says,
PREVENT ACCESS TO THE COMMAND PROMPT
Double click on it, and then click on Enable -> Apply and then -> Ok.

4. It is not necessary for a Reboot, since the changes have made in the GPEDIT, and not in the registry.
5. if this still doesn’t Work then go for a Reboot.

Advertisements

2 Comments

Leave a Comment
  1. blueboogers44 / Dec 6 2008 3:37 pm

    awesome thanks for that command I was able to stop the annoying prompts hopefully that killed it. I hope they are not running in the background as that is an option for xp users to run the prompt via background even if the prompts are ‘unable’ to load I think..

  2. chinturj / Jul 24 2009 4:07 pm

    But this can be changed by any if they know the gpedit.msc rite? is der any way to access gpedit if taskmgr,run,shortcuts,bat file xecution al r desabled? or can gpedit be password protected?

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: