My environment has a requirement that the command prompt be disabled for any non-administrator users. This is easy to do in Windows 2008 with a local policy via the MMC, as per instructions from maxvre here: http://www.edugeek.net/forums/windows-7/67055-blocking-command-prompt.
I cannot figure out how to do the same thing in Windows 2003 SP2. The options are not in the dialog boxes to create a policy just for non-administrators.
Does anybody out there know how I can disable the command prompt for all non-administrators, leaving it available to administrators, on Windows 2003 SP2?