Re: Disabling Command.com with Group Policy
From: Mark Renoden [MSFT] (markreno_at_online.microsoft.com)
Date: 11/07/04
- Previous message: J.Blanchard: "Re: Detecting server vs. workstation type at login"
- In reply to: Larry Vargo: "Re: Disabling Command.com with Group Policy"
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 8 Nov 2004 08:34:02 +1100
Hi Larry
Using "Run only allowed Windows applications" and specifying just the
allowed executables seems to address this.
Kind regards
-- Mark Renoden [MSFT] Windows Platform Support Team Email: markreno@online.microsoft.com Please note you'll need to strip ".online" from my email address to email me; I'll post a response back to the group. This posting is provided "AS IS" with no warranties, and confers no rights. "Larry Vargo" <ljvargo@qwest.net> wrote in message news:%23ipEAX1wEHA.2316@TK2MSFTNGP15.phx.gbl... > Thanks for the help... > > Your suggestion helps when you use My computer or Explorer to run the > COMMND.COM. That will disable that. > > It doesn't help if I go to my desktop and create a shortcut to > command.com. > When I do that, it will run the DOS Prompt and allow me to continue using > it. > > Any suggestion on fixing that? > > Thanks in advance. > > > "Mark Renoden [MSFT]" <markreno@online.microsoft.com> wrote in message > news:ejBWEkrwEHA.3528@tk2msftngp13.phx.gbl... >> Hi Larry >> >> You can use >> >> User configuration -> administrative templates -> system -> "Don't run >> specified Windows applications". >> >> Enable the policy and specify command.com in the list of disallowed apps. >> >> Kind regards >> -- >> Mark Renoden [MSFT] >> Windows Platform Support Team >> Email: markreno@online.microsoft.com >> >> Please note you'll need to strip ".online" from my email address to email >> me; I'll post a response back to the group. >> >> This posting is provided "AS IS" with no warranties, and confers no > rights. >> >> "Larry Vargo" <ljvargo@qwest.net> wrote in message >> news:uNw1v9pwEHA.3492@TK2MSFTNGP11.phx.gbl... >> > Hi All, >> > >> > My question has to do with disabling command.com in an windows 2000 >> > environment. I can disable the cmd.exe with group policy, but >> > command.com >> > isn't affected by it. I can go to My Computer and pick command.com >> > located >> > in the winnt/system32/ directory and run it to a DOS prompt. CMD.exe > is >> > unusable, but command.com is. >> > >> > Can anyone tell me how to disable command.com on a windows 2000 domain >> > through policies? >> > >> > Thanks in advance, >> > >> > Larry >> > >> > >> >> > >
- Previous message: J.Blanchard: "Re: Detecting server vs. workstation type at login"
- In reply to: Larry Vargo: "Re: Disabling Command.com with Group Policy"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
