How to disable Command Prompt through Local Group Policy Editor

 Firstly think why we may want to disable access to cmd? Who needs access? What does cmd do?

1. Open the start menu

2. Type gpedit.msc and select local group policy editor.

3. Select the following path: User Configuration > Administrative Templates > System

4 On the right pane, double-click the Prevent access to the command prompt policy.

5. Then simply click enabled. Note the section "Disable the command prompt scripting also" This may need to be left on if batch files are running on logon or logoff as part of wider system administration

Critical thinking

Have you justified your decision for disabling command prompt? Some users may need access to it? Can the activity you have just done be separated by user types? If so provide details