Command Prompt - Enable or Disable

How to Enable or Disable the Command Prompt in Vista and Windows 7​

   Information

This will show you how to enable or disable the command prompt with the option to also disable command scripts (.cmd and .bat files) from running for all users in Windows 7 and Vista.

The command prompt is enabled by default.

   Note

If you disable the command prompt and a user tries to open a command prompt window, the system displays a message explaining that a setting prevents the action. See the disabled example below.

EXAMPLE: Command Prompt Enabled
NOTE: The top screenshot is the normal command prompt, and the bottom screenshot is an elevated command prompt.

​

​

​

EXAMPLE: Command Prompt Disabled
NOTE: You will see this message from both command prompts above when set as disabled.

​

​

OPTION ONE

Using a REG File Download

1. To Enable Command Prompt and Scripts​

NOTE: This is the default setting.​

​

A) Click on the download button below to download the file below.​

​

Enable_Command_Prompt_and_Scripts.reg​

​

​

B) Go to step 4.​

2. To Disable Command Prompt Only and Allow Scripts​

​

A) Click on the download button below to download the file below.​

​

Disable_Command_Prompt.reg​

​

​

B) Go to step 4.​

3. To Disable Command Prompt and Scripts​

WARNING: Do not prevent (disable) the computer from running batch files (Command Scripts) if the computer uses logon, logoff, startup, or shutdown batch file scripts, or for users that use Terminal Services. They will not work afterwards if you do.​

​

A) Click on the download button below to download the file below.​

​

Disable_Command_Prompt_and_Scripts.reg​

​

​

4. Click on Save, and save the .reg file to the Desktop.​

​

5. Right click on the downloaded .reg file and click on Merge.​

​

6. Click on Run, Continue (UAC-Vista) or Yes (UAC-Windows7), Yes, and then OK when prompted.​

​

7. When done, you can delete the downloaded .reg file if you like.​

​

OPTION TWO

Through the Local Group Policy Editor

1. Open the all users, specific users or groups, or all users except administrators Local Group Policy Editor for how you want this policy applied.​

​

2. In the left pane, click on User Configuration, Administrative Templates, and System. (See screenshot below)​

​

​

3. In the right pane, right click on Prevent access to the command prompt and click on Properties. (See screenshot above)​

​

4. To Enable the Command Prompt and Scripts​

​

A) Select (dot) Disabled or Not Configured and click on OK. (See screenshot below 5C)​

NOTE: Not Configured is the default setting.​

​

B) Go to step 6.​

5. To Disable the Command Prompt ​

​

A) Select (dot) Enabled.​

​

B) Select Yes or No from the drop down menu to Disable or Allow Command Scripts (.cmd and .bat files) to still run.​

WARNING: Do not prevent (disable) the computer from running batch files (Command Scripts) if the computer uses logon, logoff, startup, or shutdown batch file scripts, or for users that use Terminal Services. They will not work afterwards if you do.​

​

C) Click on OK.​

​

​

6. Close the Local Group Policy Editor window. Your done.​

​

OPTION THREE

Manually in Registry Editor

1. Open the Start Menu, then type regedit in the search box and press Enter.​

​

2. If prompted by UAC, then click on the Continue (Vista) or Yes (Windows 7).​

​

3. In regedit, navigate to the location below. (See screenshot below)​

NOTE: If you do not have System in the left pane, then right click on Windows and click on New and Key. Type System and press Enter.​

​

HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System​

​

​

4. To Disable the Command Prompt​

​

A) In the right pane, right click on a empty area and click on New and DWORD (32-bit) Value. (See screenshot above)​

​

B) Type DisableCMD and press Enter.​

​

C) Right click on DisableCMD and click on Modify. (See screenshot below)​

​

​

​

D) To Disable Command Prompt Only and Allow Scripts ​

• Type 2 and click on OK. (See screenshots below)

​

​

​

​

E) To Disable Command Prompt and Scripts ​

​

WARNING: Do not prevent (disable) the computer from running batch files (Command Scripts) if the computer uses logon, logoff, startup, or shutdown batch file scripts, or for users that use Terminal Services. They will not work afterwards if you do.​

• Type 1 and click on OK. (See screenshots below)

​

​

​

​

F) Go to step 7.​

6. To Enable Command Prompt and Scripts​

NOTE: This is the default setting.​

​

A) In the right pane, right click on DisableCMD and click on Delete. (See screenshot above)​

​

B) Click on Yes to confirm deletion.​

7. Close regedit.​

​

That's it,
Shawn

Related Tutorials

---

• How to Use Open Command Prompt Window Here in Vista
• How to Run Disk Defragmenter from the Command Prompt in Vista
• List of Commands for Vista and How to Use them
• How to Create a Elevated Command Prompt Shortcut in Vista
• How to Open a Elevated Command Prompt in Vista
• How to Open a Command Prompt at Startup in Vista
• How to Enable or Disable Regedit in Vista and Windows 7

 

[Brink]

Hello Kevin, and welcome to Vista Forums.

Here are my Windows Color and Appearance settings to get that color.



Shawn

 

[kevin21388]

Thanks, also I changed my start-up programs and disabled UAC last night, great tutorials on them.

 

[Brink]

You're welcome Kevin.

 

[i7pro]

excellent post, brink...
worked flawlessly...

i also have one question...
does any keylogger get detected as virus?

 

[Brink]

You're welcome i7pro, and welcome to Vista Forums.

It really depends on the antivirus program and it's definition updates, but it's not uncommon for a keylogger to cause a antivirus program to throw up a red flag on it.

 

[i7pro]

thanks brink...

 

[Brink]

You're most welcome i7pro.

 

[xJester1]

Since both REG and CMD are disabled, it will need to be done from outside of Vista instead.

Hello brink,
I am afraid that in this case I am in this situation. I still have access to the original Administrator account but I can only figure the best way to solve this is to create a completely new account on the computer. It started out when my little brother had decided it would be cool to download some team fortress 2 hacks and did not know what was what. SOMEHOW Task Manager, Registry Editor, and Command prompt were all disabled to this account, all showing the the same disabled by administrator message. Please help me I do not have the kind of time to create a new account and re-install all the programs I have on this account.
thanks,
xJester
P.S i am running windows vista home premium 32bit

 

[Brink]

Hello Jester, and welcome to Vista Forums.

If you have a retail Vista, then you can do a repair install to fix this without losing anything.

Hope this helps,
Shawn

 

[xJester1]

Thanks brink for the reply,
Unfortunately (again) Vista Home Premium came installed on the computer, So is there any other way that I might Possibly access and edit permissions of this account from another administrator account?? If this is possible or there is a better way that would be great.

Thanks,
xJester

 

[Brink]

Jester,

Your computer has been infected with a virus or some form of malware. Before trying to create a new account, you should make sure that your computer is clean first by thoroughly scanning it with a good antivirus program and a antimalware program like the free Malwarebytes.

If you still cannot get things back in order afterwards, then you can try doing a system restore at boot using a restore point dated before you had this issue to hopefully fix it for you. If not, then you may need to do a factory restore instead since you do not have any other administrator account that you can access.

 

[xJester1]

Jester,

Your computer has been infected with a virus or some form of malware. Before trying to create a new account, you should make sure that your computer is clean first by thoroughly scanning it with a good antivirus program and a antimalware program like the free Malwarebytes.

If you still cannot get things back in order afterwards, then you can try doing a system restore at boot using a restore point dated before you had this issue to hopefully fix it for you. If not, then you may need to do a factory restore instead since you do not have any other administrator account that you can access.

Thanks for all you help Brink My virus scanner found the Malware and has removed it and everything is back to normal

 

[Brink]

You're most welcome Jester. I'm happy to hear that you got it sorted.