Re: Preventing access to command.com

That used to be the case originally in XP Pro but it was fixed in one of the
service packs. Glad you got it working the way you want.

Steve


"Joshua Morgan" <joshua.morgan@xxxxxxxxx> wrote in message
news:1153722065.774174.63960@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
For some reason I had the pre-conceived idea that you couldn't create
Software Restriction Policies for 16-bit applications. I just created a
Software Restriction Policy for command.com and it works great.

Thanks for your help! :)

Steven L Umbach wrote:
You can delete command.com if you have not need to use it for 16 bit apps
but that will not stop someone from copying it to their user profile to
run.
A couple possibilities to try to prevent it's access could be - as you
mentioned delete it or change the permissions on it [probably better
option
than deleting] so that only authorized users can execute copies the
currently exist on the computer, add command.com to the disallowed
Windows
application list under user configuration/administrative
templates/system -
don't run specified Windows applications with the understanding that it
will
not work if a user renames command.com., using Group Policy Software
Restriction Policies for XP Pro to create a hash rule to disallow use of
command.com and if you do that try to find all the versions of
command.com
you can from the different operating systems or again assuming you have
no
need to run 16 bit applications you could also try deleting or renaming
AUTOEXEC.NT in the \Windows\system32 folder.

Steve


<joshua.morgan@xxxxxxxxx> wrote in message
news:1153714807.346762.207470@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi all,

Whilst you can use Group Policy to prevent access to cmd.exe, you can't
prevent access to command.com as it is a 16-bit application.

Is there any other way to prevent access to command.com? Will deleting
command.com render the system unusable?

Regards,

Joshua Morgan




.

Relevant Pages

  • Re: Can this be done?
    ... You have an Old PC with XP Pro many applications ... 'Upgrading' Home to Pro is not an issue. ... is to install all those applications onto the XP Home ... If I use the restore disk, ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Can this be done?
    ... >> applications and documents. ... 'Upgrading' Home to Pro is not an issue. ... is to install all those applications onto the XP Home ... > Home disk, I can't, It's part of the restore disk. ...
    (microsoft.public.windowsxp.help_and_support)
  • Help Needed - Suggestions on Which Applications Can be Un-Checked (as listed by: MsConfig.
    ... for Windows - ... to check which processes / applications got ... MSConfig, Win 98 Pro, File 1.rtf ... A: Have no internet service ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Restricting file access on USB flash storage device.
    ... You can control access to authorized only applications with Software ... Restriction Policies in XP Pro, so if possible try to upgrade at least a few ... machines to XP Pro to try that out. ...
    (microsoft.public.win2000.security)
  • Re: save w2k group policy setting
    ... Based on my W2k Pro OS, please advise, can I still create a Group Policy ... default settings and the amended settings. ...
    (microsoft.public.win2000.group_policy)