How to restrict command line CMD from users that are not admins or to a specific list of users

Question

We need to block CMD for all users on all endpoints

While we are intrested to approve the CMD to run as administrator so only administrator will be able to execute or approve to a list of users

Answer 1

Hi,

Hi @Moti (Andre) Landes

You can use Applocker (via GPO) , to allow only allowed user or groups to launch %windir%\system32\cmd.exe.

In your case,you should sepcify the path of CMD.exe %windir%\system32\cmd.exe and specify on local asministrators group .

Please don't forget to mark helpful answer as accepted*****