Comments on: Preventing command prompt access except by domain admin http://itknowledgeexchange.techtarget.com/itanswers/preventing-command-prompt-access-except-by-domain-admin/ Sun, 26 May 2013 01:40:27 +0000 hourly 1 By: rechil http://itknowledgeexchange.techtarget.com/itanswers/preventing-command-prompt-access-except-by-domain-admin/#comment-84958 rechil Tue, 07 Dec 2010 08:52:50 +0000 #comment-84958 Click Start > Run> gpdit.msc > user configuration > administrative templates > system > find prevent access to the command prompt > right click > properties > click enable > ok and reboot. Now activate only Administrator….Open command prompt and type as
net user administrator /active:yes
OR u can do it another way :
Start > Type Control UserPasswords2, then click Advanced & again click Advanced, now
select Users and select Administrator and uncheck the the box “Administrator is disabled”
Now log out and login as Administrator

NOTE: If u want to disable this for a specific user make the change in the registry. Login to the account u want to change and create the following registry entries:
HKEY_CURRENT_USERSoftwarePoliciesMicrosoftWindowsSystem
DisableCMD dword 0×00000001 to disable command prompt and batch files
or
DisableCMD dword 0×00000002 to disable command prompt but not batch files

Remember these are all related XP / 2003 /
For Vista and 7, may change slightly.
CAUTION: Before doing anything with registry, it is good practice to take registry backup for safety purpose from File > Export

]]>