DisableCMD

HKCU\Software\Policies\Microsoft\Windows\System

Data type Range Default value
REG_DWORD (Not in registry) | 1 | 2 (Not in registry)

Description

Determines whether users can run the interactive command prompt, Cmd.exe, and determines whether batch files (.cmd and .bat) can run on the system while this user is logged on.

This entry stores the setting of the Disable the command prompt Group Policy. Group Policy adds this entry to the registry when you enable the Disable the command prompt policy. If you disable the policy or set it to Not configured, Group Policy deletes the entry from the registry.

Value Meaning
(Not in registry.) The policy is not configured. Users can run Cmd.exe and batch files can run on the system.
1 The policy is enabled and set to Yes. Users cannot run Cmd.exe, but the system can run batch files.
2 The policy is enabled and set to No. Users cannot running Cmd.exe, and batch files cannot run on the system.

When this entry appears in the registry, users cannot run Cmd.exe. If a user tries to open a command window, the system displays a message explaining that a policy prevents the action.

Change method

To change the value of this entry, use Group Policy. This entry corresponds to the Disable the command prompt policy (User Configuration\Administrative Templates\System).

Tip Image Tip

For detailed information about particular Group Policy settings, see the Group Policy Reference (Gp.chm) on the Windows 2000 Resource Kit companion CD.

For general information about Group Policy, see Group Policy in Windows 2000 Help.

To see a table associating policies with their corresponding registry entries, see the Group Policy Reference Table.

Caution Image Caution

Do not prevent the computer from running batch files if the computer uses logon, logoff, startup, or shutdown batch file scripts, or for users that use Terminal Services.