Windows Forum

Ask something
Question Locked

Registry tweak to remove run

0 helpful
6 replies

by muiezahmed

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi,

where the key or Dword to be added in registry using HKEY_LOCAL_MACHINE to remove run command for all users from the computer, i tried for HKEY_CURRENT_USER but i need to disable it for all users in Windows XP and does this also works if i add any new users in future. Reply needed desparately

Thanks in advance

6 replies

by rob miners

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoRun"=dword:00000001

Keep us informed as to your progress if you require further assistance.

If you think that any of the posts that have been made by all TR Members, have solved or contributed to solving the problem, please Mark them as Helpful so that others may benefit from the outcome. ;) :D

by muiezahmed

Thanks for the reply, but i knew this and i have tried this it works but what i needed was for the local machine i have added a key it is working now the key is
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer] "NoRun"=dword:00000001, it is working now but i also need to restrict access to Command Prompt for all users how can i do that from HKEY_LOCAL_MACHINE.....

by rob miners

but you have to remember that you also have command.com. With limited access they won't be able to do much damage. I supplied the answer to your original question that you asked. It worked for me when I tested it.

< speel chucker not working >

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Command Processor]
"EnableExtensions"=dword:00000000
"CompletionChar"=dword:00000000

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\.cmd]
@="cmdfile"

[HKEY_CLASSES_ROOT\.cmd\PersistentHandler]
@="{5e941d80-bf96-11cd-b579-08002b30bfeb}"

Keep us informed as to your progress if you require further assistance.

If you think that any of the posts that have been made by all TR Members, have solved or contributed to solving the problem, please Mark them as Helpful so that others may benefit from the outcome. ;) :D

by muiezahmed

Hi i didnt understand what this registry mean can you please give me the details

by rob miners

The following will disable command extensions, and disable filename and folder expansion with the TAB key

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Command Processor]
"EnableExtensions"=dword:00000000
"CompletionChar"=dword:00000000

This will disable any extension .cmd

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\.cmd]
@="cmdfile"

[HKEY_CLASSES_ROOT\.cmd\PersistentHandler]
@="{5e941d80-bf96-11cd-b579-08002b30bfeb}"

And this should disable command.com
Registry Settings
User Key: [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System]
Value Name: DisableCMD
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = default, 1 = disabled, 2 = disabled but allow batch)

Keep us informed as to your progress if you require further assistance.

If you think that any of the posts that have been made by all TR Members, have solved or contributed to solving the problem, please Mark them as Helpful so that others may benefit from the outcome. ;) :D

This discussion is closed to new replies.