Access to command prompt especially as an administrator can be dangerous provided one is not aware of what they are doing.
What if execution of batch files needs to be blocked from a particular Windows 7 system as a security measure? Batch files too use cmd.exe for launching and hence the need to block access to command prompt itself in order to prevent batch files from running.
These settings to disable are available only in Windows 7 Ultimate and Enterprise.
To disable access to command prompt :
1.Launch Local Group Policy Editor (Start > Run > gpedit.msc)
2.Drill down to User Configuration > Administrative Templates > System
3.Select Prevent Access To Command Prompt.
4.Select Enable to turn on the restriction.
To disable the launching of batch files,there is an additional step of selecting Yes to Disable Command Prompt Script Processing.
Try to launch command prompt after the above is done,it won’t open anymore.
The same goes for opening any batch file provided the disable command prompt script processing was selected,it too would show the same display message.
.
All done.
Just a word of caution – Do not try this settings on Windows 7 systems which use batch scripts for automating various tasks.
Hope this was informative.



>it's work properly……… yaaaaa
>it was actually helpful.
how can access command prompt in login window
@khalid – Access command prompt either through Windows button and typing in “cmd” in search box or through All Programs > Accessories > Command Prompt after clicking the Windows button.