> For the complete documentation index, see [llms.txt](https://ghoulsec.gitbook.io/ghoulsec-vault/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ghoulsec.gitbook.io/ghoulsec-vault/server-are-fun/servers/windows-sever/group-policy-editor/restricting-cmd-and-powershell.md).

# Restricting CMD & Powershell

#### 1. **Restricting Command Prompt (CMD)**

To disable Command Prompt (cmd.exe), follow these steps:

1. **Open the Group Policy Editor**:
   * Press `Win + R`, type `gpedit.msc`, and press Enter.
2. **Navigate to the following path**:

   ```
   User Configuration > Policies > Administrative Templates > System
   ```
3. **Find and configure the "Prevent access to the command prompt" policy**:
   * Look for the policy **"Prevent access to the command prompt"** in the right-hand pane.
   * Double-click to open the settings window.
   * Set it to **Enabled**.
   * You can also configure the option to **Disable the command prompt script processing** if needed.
4. **Click Apply** and then OK.

This policy will prevent users from accessing the Command Prompt. If the user tries to launch it, they will see an error message.

<figure><img src="/files/QPFsDMVJjddW9qgWW9xb" alt=""><figcaption></figcaption></figure>

***

#### 2. **Restricting PowerShell**

To block PowerShell, follow these steps:

1. **Open the Group Policy Editor**:
   * Press `Win + R`, type `gpedit.msc`, and press Enter.
2. **Navigate to the following path**:

   ```
   User Configuration > Administrative Templates > System
   ```
3. **Find and configure the "Don't run specified Windows applications" policy**:
   * Double-click on **"Don't run specified Windows applications"**.
   * Set it to **Enabled**.
   * In the "List of disallowed applications", click on **Show**, then type `powershell.exe` and `powershell_ise.exe` in the list.
4. **Click Apply** and then OK.

This policy will prevent users from running PowerShell or the PowerShell ISE (Integrated Scripting Environment).

<figure><img src="/files/PMW8qpWVmHyFCqWWPMO2" alt=""><figcaption></figcaption></figure>