Permissions for MS-DOS/msconfig?

[malebolgia Veteran]

Is there a way to limit what users can access msconfig or better yet the MS-DOS prompt in Windows XP?

[since2001]

Is there a way to limit what users can access msconfig or better yet the MS-DOS prompt in Windows XP?

585727092[/snapback]

You can use the following registry hack to disable the command prompt (and batch files as well):

Hive: HKEY_CURRENT_USER

Key: Software\Policies\Microsoft\Windows\System

Name: DisableCMD

Type: REG_DWORD

Value: 0 enable command prompt and batch files

Value: 1 disable command prompt and batch files

Value: 2 disable command prompt but allow batch files

The above tip is from windowsnetworking.com.

Edit: In Windows 2000/XP, there is no MS-DOS so the command-line prompt is simply called "command prompt."

[k22]

use group policy (2000 pro or XP pro) to prevent access to the command prompt

[stopdroproll]

even if you enable that, command.com is still enabled. FYI

[malebolgia Veteran]

My goal is really just to disable access to msconfig (have it only one account can access it, but I'm not sure how to do that).

[Hawkeye]

Well, as long as the users you want to limit are not in the Administrators group, then you should technically be able to block access to do it with standard NTFS permissions. You are working with executable files, so denying permissions or simply removing permissions for the appropriate group should restrict acccess to the processes.

You can find the actual files responsible for it by doing a simple file search.