Restrict Command Prompt

esterhj

Member
Nov 21, 2008
2
0
0
South Africa
Running Windows Server 2003 Terminal Server farm. I can restict members from opening command prompt AND can restrict only view members to open it. Catch here is when restrict only group to open command prompt, the scripts does not take place using Startup with cmd or bat.Achievement:-Give everyone access to open command prompt, when execute open at specific folder location (Already Done)When open, they should not be able to change to any other folder or drive. Like CD\, or D:\, ect.The location where it will open is where all execuables required for management exist and they should not be able to view anything else except the contents of that folder.GPO already used to hide all drives in Explorer, but this does not apply when oepning command prompt.Any suggestions
 

susanthasilva

Member
Nov 20, 2008
182
0
0
Dehiwala
esterhj said:
Running Windows Server 2003 Terminal Server farm. I can restict members from opening command prompt AND can restrict only view members to open it. Catch here is when restrict only group to open command prompt, the scripts does not take place using Startup with cmd or bat.Achievement:-Give everyone access to open command prompt, when execute open at specific folder location (Already Done)When open, they should not be able to change to any other folder or drive. Like CD\, or D:\, ect.The location where it will open is where all execuables required for management exist and they should not be able to view anything else except the contents of that folder.GPO already used to hide all drives in Explorer, but this does not apply when oepning command prompt.Any suggestions

Hi if you've already applid a GPO and it is not functioing properly run the GPO result and check for problems. And if you have applied this to a GPO try enforcing the particular GP to that GPO.

Cheers
 

esterhj

Member
Nov 21, 2008
2
0
0
South Africa
susanthasilva,As mentioned the GPO's work 100%, no problem their? My problem is need to restrict not changing the folder path in command prompt.All, someone with knowledge that can assist, maybe, creating a ADM template to accomodate this. If MS has a GPO to limit Explorer to specific drives then someone or MS should be able to get something published to provide similar functions to comamnd prompt as with Explorer.I need command prompt policy to prohibit users from changing the default folder path when opened AND restrict to other drives.