locked
powershell script and bat script RRS feed

  • Question

  • powershell scripts execution can be restricted to signed scripts only;
    is it possible to restrict .bat and .cmd scripts as well ?

    would it be advisable to delete cmd.exe entirely from Vista? would it prevent any .bat script to be executed ?

    Is it possible to prevent cmd.exe to be started or, at least, to control cmd.exe execution through the UAC ?


    Wednesday, April 2, 2008 9:10 AM

Answers

  • Hi,

    Run "gpedit.msc", navigate to "User configuration" - "Administrative Template" - "System".

    Choose "Prevent access to command prompt", change the setting to "Enable".

    --------------------
    Regards,
    Eric Zhang



    Monday, April 7, 2008 9:39 AM

All replies

  • Hi,

    Run "gpedit.msc", navigate to "User configuration" - "Administrative Template" - "System".

    Choose "Prevent access to command prompt", change the setting to "Enable".

    --------------------
    Regards,
    Eric Zhang



    Monday, April 7, 2008 9:39 AM
  • Hi,


    As this thread has been quiet for a while, we assume that the issue has been resolved. At this time, we will mark it as ‘Answered’ as the previous steps should be helpful for many similar scenarios.

    If the issue still persists and you want to return to this question, please reply this post directly so we will be notified to follow it up. You can also choose to unmark the answer as you wish.

    In addition, we’d love to hear your feedback about the solution. By sharing your experience you can help other community members facing similar problems.

    Thanks!
    --------------------
    Regards,
    Eric Zhang

    Thursday, April 10, 2008 1:30 AM