# Restricting CMD & Powershell

#### 1. **Restricting Command Prompt (CMD)**

To disable Command Prompt (cmd.exe), follow these steps:

1. **Open the Group Policy Editor**:
   * Press `Win + R`, type `gpedit.msc`, and press Enter.
2.  **Navigate to the following path**:

    ```
    User Configuration > Policies > Administrative Templates > System
    ```
3. **Find and configure the "Prevent access to the command prompt" policy**:
   * Look for the policy **"Prevent access to the command prompt"** in the right-hand pane.
   * Double-click to open the settings window.
   * Set it to **Enabled**.
   * You can also configure the option to **Disable the command prompt script processing** if needed.
4. **Click Apply** and then OK.

This policy will prevent users from accessing the Command Prompt. If the user tries to launch it, they will see an error message.

<figure><img src="https://2332860236-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fq6mjlFfyDOi3mV0lemKE%2Fuploads%2FnGb3rm3HWNP7UxT0IBsj%2Fimage.png?alt=media&#x26;token=434c341a-e94e-4219-94ba-532b00c1422f" alt=""><figcaption></figcaption></figure>

***

#### 2. **Restricting PowerShell**

To block PowerShell, follow these steps:

1. **Open the Group Policy Editor**:
   * Press `Win + R`, type `gpedit.msc`, and press Enter.
2.  **Navigate to the following path**:

    ```
    User Configuration > Administrative Templates > System
    ```
3. **Find and configure the "Don't run specified Windows applications" policy**:
   * Double-click on **"Don't run specified Windows applications"**.
   * Set it to **Enabled**.
   * In the "List of disallowed applications", click on **Show**, then type `powershell.exe` and `powershell_ise.exe` in the list.
4. **Click Apply** and then OK.

This policy will prevent users from running PowerShell or the PowerShell ISE (Integrated Scripting Environment).

<figure><img src="https://2332860236-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fq6mjlFfyDOi3mV0lemKE%2Fuploads%2FsfhxVOTLuh29dPJ5fiY6%2Fimage.png?alt=media&#x26;token=4c02613d-e200-4081-aa34-b44f0fe9fa55" alt=""><figcaption></figcaption></figure>

