Remove DOS prompt from NT workstations

I am in a complete NT environment, using roaming profiles and policies. I want to easily remove the DOS prompt from everyone’s start bar, but do not want to travel around to the desktops. What’s the easiest way I can delete the MS-Dos prompt shortcuts(or cmd.exe file) so that the users cannot access it. Thanks.