Skip to main content


Disable Access To The Command Prompt


Whilst the Windows Command Prompt Is a very beneficial tool for performing a variety of tasks, It can also work against the end user, namely (for example) hackers who gain remote access thereby control the target PC using a serious of commands. For Instance, files can be deleted, local user accounts can be viewed and edited and the list goes on. In this tutorial, I will show you how to disable access to the Command Prompt via the good old "Group Policy Editor".


Before I begin, do note that the Group Policy Editor Is only available In Windows 10 Pro, Enterprise and Education editions. On the grounds you have either of these Installed, this guide will serve you well. I shall also go one step further and prevent Batch files from executing- which can also be used for malicious purposes. So let's begin.

Step One:
Open the Run menu, type "gpedit.msc" (no quotes) and hit OK.



Step Two:
The Group Policy Editor window will now open. Navigate to the follow directory:
"User Configuration > Administrative Templates > System".
Then on the right pane, double-click:
"Prevent access to the command prompt".




Step Three:
On the left-hand side, click the "Enabled" radio button. Under Options, select "Yes" via the drop-down menu. This part also disables batch files. To finalize the process, hit "OK".



Step Four:
Here's what happened when I tried opening the Command Prompt, even with elevated/administrator privileges. Access was denied, which Is exactly what I wanted.



Last Step:
Now to put the batch file to the test. Upon executing It, the very same message was displayed, hence access denied.



Final Thoughts:
This Is a very simplistic method to restrict access to both the Command Prompt & batch files from executing. To enable access as per normal, reverse the above process.

Given there's quite a few methods available, the majority of computational users may not be aware of "how" the Command Prompt has been disabled, thus this particular tweak Is very effective Indeed.



Comments

Popular posts from this blog

How To Decode The Windows 10 Product Key

Every Windows 10 operating system that's Installed and activated on the computer, has what's called a Product Key, that Is either pre-Installed by the manufacturer, or added by the end user when formatting their PC. In order to have a fully-functional OS, It must contain a valid Product Key. Whilst there are many tools that can extract It from the operating system, In this tutorial, I will show you how to manually decode the Product Key.

How To Rename Any Power Plan In Windows 10

In terms of managing and controlling the way your computer utilizes power during It's computing operations, Windows has built-In power plans, that are basically a collection of hardware and system settings. By default, there are three In total, namely Balanced, Power Saver and High Performance. Whilst you can change the plan Itself, there's no option to do the same with It's name, hence In this tutorial, I will show you how to rename any power plan In Windows 10.

How To Create A Fake File Of Any File Size

Depending on your business environment or Individual requirements, sometimes there Is the need to test files of a given capacity. Such tests can Include Identifying how well your hard disks perform under heavy read/write operations, or to establish whether files can be securely deleted beyond recovery. Whatever the reason may be, In this tutorial, I will show you how to create a fake file of any file size.