Published by

**Brink** · 12 May 2008

How to Enable or Disable the Command Prompt in Vista and Windows 7

Information

This will show you how to enable or disable the command prompt with the option to also disable command scripts (.cmd and .bat files) from running for all users in Windows 7 and Vista.

The command prompt is enabled by default.

Note

If you disable the command prompt and a user tries to open a command prompt window, the system displays a message explaining that a setting prevents the action. See the disabled example below.

EXAMPLE: Command Prompt Enabled
NOTE: The top screenshot is the normal command prompt, and the bottom screenshot is an elevated command prompt.

EXAMPLE: Command Prompt Disabled
NOTE: You will see this message from both command prompts above when set as disabled.

OPTION ONE

Using a REG File Download

1. To Enable Command Prompt and Scripts
NOTE: This is the default setting.

A) Click on the download button below to download the file below.

Enable_Command_Prompt_and_Scripts.reg

B) Go to step 4.

2. To Disable Command Prompt Only and Allow Scripts

A) Click on the download button below to download the file below.

Disable_Command_Prompt.reg

B) Go to step 4.

3. To Disable Command Prompt and Scripts
WARNING: Do not prevent (disable) the computer from running batch files (Command Scripts) if the computer uses logon, logoff, startup, or shutdown batch file scripts, or for users that use Terminal Services. They will not work afterwards if you do.

A) Click on the download button below to download the file below.

Disable_Command_Prompt_and_Scripts.reg

4. Click on Save, and save the .reg file to the Desktop.

5. Right click on the downloaded .reg file and click on Merge.

6. Click on Run, Continue (UAC-Vista) or Yes (UAC-Windows7), Yes, and then OK when prompted.

7. When done, you can delete the downloaded .reg file if you like.

OPTION TWO

Through the Local Group Policy Editor

1. Open the all users, specific users or groups, or all users except administrators Local Group Policy Editor for how you want this policy applied.

2. In the left pane, click on User Configuration, Administrative Templates, and System. (See screenshot below)

3. In the right pane, right click on Prevent access to the command prompt and click on Properties. (See screenshot above)

4. To Enable the Command Prompt and Scripts

A) Select (dot) Disabled or Not Configured and click on OK. (See screenshot below 5C)
NOTE: Not Configured is the default setting.

B) Go to step 6.

5. To Disable the Command Prompt

A) Select (dot) Enabled.

B) Select Yes or No from the drop down menu to Disable or Allow Command Scripts (.cmd and .bat files) to still run.
WARNING: Do not prevent (disable) the computer from running batch files (Command Scripts) if the computer uses logon, logoff, startup, or shutdown batch file scripts, or for users that use Terminal Services. They will not work afterwards if you do.

C) Click on OK.

6. Close the Local Group Policy Editor window. Your done.

OPTION THREE

Manually in Registry Editor

1. Open the Start Menu, then type regedit in the search box and press Enter.

2. If prompted by UAC, then click on the Continue (Vista) or Yes (Windows 7).

3. In regedit, navigate to the location below. (See screenshot below)
NOTE: If you do not have System in the left pane, then right click on Windows and click on New and Key. Type System and press Enter.

HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System

4. To Disable the Command Prompt

A) In the right pane, right click on a empty area and click on New and DWORD (32-bit) Value. (See screenshot above)

B) Type DisableCMD and press Enter.

C) Right click on DisableCMD and click on Modify. (See screenshot below)

D) To Disable Command Prompt Only and Allow Scripts

Type 2 and click on OK. (See screenshots below)

E) To Disable Command Prompt and Scripts

WARNING: Do not prevent (disable) the computer from running batch files (Command Scripts) if the computer uses logon, logoff, startup, or shutdown batch file scripts, or for users that use Terminal Services. They will not work afterwards if you do.

Type 1 and click on OK. (See screenshots below)

F) Go to step 7.

6. To Enable Command Prompt and Scripts
NOTE: This is the default setting.

A) In the right pane, right click on DisableCMD and click on Delete. (See screenshot above)

B) Click on Yes to confirm deletion.

7. Close regedit.

That's it,
Shawn

Related Tutorials

**bennys** · 19 Aug 2008

Please help me out here. What is the purpose of Command Prompt? I have read about it but I am still confused. This is the quote from one of the sites I read "This is how computers used to work before the mouse became common. You have to type in your commands". Then why do we use it still? since we already have a mouse to get to where we want. Please make it simple.
Thanks.

**Brink** · 19 Aug 2008

Hi Bennys,

While the Windows GUI (interface) has made it a lot easier to work on computers than the old DOS days, the command prompt can still be very useful if you cannot use the GUI for a task for whatever reason. It oftens allow you to perform advanced actions that you normally may not be able to do. (Ex: More features for Disk Defragmenter) Plus, using an elevated command prompt will make doing certain tasks easier since it has high permission. This link will help explain the command prompt in more details though.

Search Results

Hope this helps,
Shawn

**yl89** · 10 Oct 2008

why is some most of my setting enabled when it is (not configured)

**Brink** · 10 Oct 2008

Hello yl89,

In the Local Group Policy Editor, when something is set a (not configured), it usually indicates that that item is allowed (enabled) to run. Most Local Group Policies will disable or restict what the policy is for when they are Enabled. In the Local Group Policy Editor, these settings are strictly to Enable (to allow and enforce), Disable (not to allow ever), (not configured) (not allow, but let settings elsewhere in Vista decide instead) the policies.

Hope this helps,
Shawn

**yl89** · 10 Oct 2008

the problem is.since my system have always been (not configured) it have been running smoothly untill i have been hit with a trojan called "RONTOKBRO”and my acess to regedit have been denied untill i have cleared the trojan and enable regedit in gpedit and as you said.Some setting in vista have change it descision,and i hope i can change back the setting because i do dont know which shld be set disable or enable

**Brink** · 10 Oct 2008

In the Local Group Policy Editor, everything is set to (not configured) by default. If it was not more than 90 days ago since your infection, it may be easier to do a System Restore using a restore point dated before the infection.

**yl89** · 11 Oct 2008

i did not save a restore point!

**Brink** · 11 Oct 2008

Ok,

What did you need to get enabled again?

If it is the command prompt, where you able to use Method Two?

**yl89** · 12 Oct 2008

nevermind .you dont get what i mean.anyway thanks for replying

Similar Threads
Tutorial	Tutorial Starter	Category	Comments	Last Post
Make a command prompt run a command as soon as it opens?	PainlessTorture	General Discussion	11	17 Nov 2008
Keep getting prompt to enable option to send Microsoft information	VanguardLH	Live Mail	0	30 Apr 2008
Command prompt "COPY" command not working in brand new Windows Vis	CMD COPY command not working in Vista	Vista file management	7	05 Feb 2008
Enable/Disable NIC from command line?	harryajh	Vista General	4	20 Sep 2007
How to enable prompt to confirm shutdown/restart?	Eric Fortier	Vista General	8	06 May 2007

Published by

Tutorial Tools

Applies to

Re: Command Prompt - Enable or Disable

Re: Command Prompt - Enable or Disable

Re: Command Prompt - Enable or Disable

Re: Command Prompt - Enable or Disable

Re: Command Prompt - Enable or Disable

Re: Command Prompt - Enable or Disable

Re: Command Prompt - Enable or Disable

Re: Command Prompt - Enable or Disable

Re: Command Prompt - Enable or Disable

Posting Permissions