Hi, I have many stand alone machines on display running Win7 Professional, and a few people like to play with the command line in order to cause havoc to said machines. Is there a way to disable access to the command line without the use of Group Policy? Thanks John

You could remove the NTFS permissions for Users from cmd.exe. This will allow the administrator account/s to still use CMD but not a "Display User" It is also possible to use Local Group Policy - gpedit.msc to prevent access to the CMD User Config > Admin Templates > System - Prevent Access to the Command Prompt Hope these helpLee Bowman MCITP MCTS

I didn't think of NTFS thank you for that, i'll give it a go John Miller MCTS