Share via

How to restrict command line CMD from users that are not admins or to a specific list of users

Moti (Andre) Landes 0 Reputation points
2023-02-19T18:20:20.49+00:00

We need to block CMD for all users on all endpoints

While we are intrested to approve the CMD to run as administrator so only administrator will be able to execute or approve to a list of users

Windows for business | Windows Client for IT Pros | User experience | Other
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Thameur-BOURBITA 36,526 Reputation points Moderator
    2023-02-19T19:35:02.48+00:00

    Hi,

    Hi @Moti (Andre) Landes

    You can use Applocker (via GPO) , to allow only allowed user or groups to launch %windir%\system32\cmd.exe.

    create new rule

    In your case,you should sepcify the path of CMD.exe %windir%\system32\cmd.exe and specify on local asministrators group .

    Please don't forget to mark helpful answer as accepted*****

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.