Skip to main content


Disable Access To The Command Prompt


Whilst the Windows Command Prompt Is a very beneficial tool for performing a variety of tasks, It can also work against the end user, namely (for example) hackers who gain remote access thereby control the target PC using a serious of commands. For Instance, files can be deleted, local user accounts can be viewed and edited and the list goes on. In this tutorial, I will show you how to disable access to the Command Prompt via the good old "Group Policy Editor".


Before I begin, do note that the Group Policy Editor Is only available In Windows 10 Pro, Enterprise and Education editions. On the grounds you have either of these Installed, this guide will serve you well. I shall also go one step further and prevent Batch files from executing- which can also be used for malicious purposes. So let's begin.

Step One:
Open the Run menu, type "gpedit.msc" (no quotes) and hit OK.



Step Two:
The Group Policy Editor window will now open. Navigate to the follow directory:
"User Configuration > Administrative Templates > System".
Then on the right pane, double-click:
"Prevent access to the command prompt".




Step Three:
On the left-hand side, click the "Enabled" radio button. Under Options, select "Yes" via the drop-down menu. This part also disables batch files. To finalize the process, hit "OK".



Step Four:
Here's what happened when I tried opening the Command Prompt, even with elevated/administrator privileges. Access was denied, which Is exactly what I wanted.



Last Step:
Now to put the batch file to the test. Upon executing It, the very same message was displayed, hence access denied.



Final Thoughts:
This Is a very simplistic method to restrict access to both the Command Prompt & batch files from executing. To enable access as per normal, reverse the above process.

Given there's quite a few methods available, the majority of computational users may not be aware of "how" the Command Prompt has been disabled, thus this particular tweak Is very effective Indeed.



Comments

Popular posts from this blog

How To Decode The Windows 10 Product Key

Every Windows 10 operating system that's Installed and activated on the computer, has what's called a Product Key , that Is either pre-Installed by the manufacturer, or added by the end user when formatting their PC. In order to have a fully-functional OS, It must contain a valid Product Key. Whilst there are many tools that can extract It from the operating system, In this tutorial, I will show you how to manually decode the Product Key.

How To Create A Fake File Of Any File Size

Depending on your business environment or Individual requirements, sometimes there Is the need to test files of a given capacity. Such tests can Include Identifying how well your hard disks perform under heavy read/write operations, or to establish whether files can be securely deleted beyond recovery. Whatever the reason may be, In this tutorial, I will show you how to create a fake file of any file size. 

Add The Briefcase Feature To Windows 10

Since the release of Windows 95 right through to Windows 7, a built-In utility named Briefcase allows you to store and synchronize files between two or more computers, as well as removable media such as a USB flash drive. In Windows 10 however, It's no longer available but It can still be created. As such, In this tutorial, I will show you how to add the Briefcase feature back Into Windows 10 .