Re: MSDOS and AD group policies

Tech-Archive recommends: Fix windows errors by optimizing your registry

You can use the setting "Prevent access to the command prompt", you'll find
it in 'User Configuration\Administrative Templates\System' in the Group
Policy Editor.

One caveat is that you won't be able to run any scripts. See the help text
on the setting for details.

Regards,
/Jimmy
--
Jimmy Andersson, Q Advice AB
Microsoft MVP - Directory Services
---------- www.qadvice.com ----------


"Lachlan Musicman" <LachlanMusicman@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:AA02D2F8-73FF-43C3-96E9-6A67C7013B0D@xxxxxxxxxxxxxxxx
> I'm trying to lock down a computer completely.
>
> Is there an option in the Group Policy setting which can restrict access
> to
> the DOS prompt in a win2K AD domain, on an XP Pro machine?
>
> I've been trawling through the options, and it's the last one I've got to
> fix - but there doesn't seem to be an option for it anywhere?


.