Firstly think why we may want to disable access to cmd? Who needs access? What does cmd do?
1. Open the start menu
2. Type gpedit.msc and select local group policy editor.
3. Select the following path: User Configuration > Administrative Templates > System
4 On the right pane, double-click the Prevent access to the command prompt policy.
5. Then simply click enabled. Note the section "Disable the command prompt scripting also" This may need to be left on if batch files are running on logon or logoff as part of wider system administration
Critical thinking
Have you justified your decision for disabling command prompt? Some users may need access to it? Can the activity you have just done be separated by user types? If so provide details
http://dlvr.it/ShvDLG
No comments:
Post a Comment