中国DOS联盟

By modifying the registry, you can prohibit users from using the command interpreter (CMD.exe) and running batch files (BAT files).

Enter the registry key
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System\,
create a double-byte value item DisableCMD, and modify its value to 2.
Then both the command interpreter and batch files cannot be run.
If you only want to prohibit the running of the command interpreter but allow the running of batch files, modify the value of DisableCMD to 1.

Both 1 and 2 are prohibitions, so what is 0? Of course, there are no restrictions.

I saw a method to disable the registry by modifying the registry, which works well, but I want to implement it with a batch file. I don't know how to modify it. Please help me, masters. I also want to learn how to modify the registry with a batch file. The more detailed the better. Thank you!

After modifying to 1, neither works. After modifying to 2, it has no effect winXP-SP2@cmd

Thanks to the correction from user 2, but how to implement it!

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmd.EXE" /v debugger /t reg_sz /d debugfile.exe /f

reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmd.exe" /f

The command-line tool reg.exe is used to operate the registry. Type reg /? to view the help.

=======================
Using "image hijacking" can disable the running of cmd.exe and batch processing simultaneously.
Disable

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmd.EXE" /v debugger /t reg_sz /d debugfile.exe /f

Restore

reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmd.exe" /f

Last edited by tireless on 2008-9-10 at 10:47 PM ]

You wrote HKLM, so you can't find it

Thank you, friend on the 4th floor. You helped me solve the problem, but it's useless to post it back because you've prohibited running. Can your restored batch file still run? But I'm very grateful!

The recovery can use this method: generate a.reg file and then import it into the registry.

Originally posted by mfdcxnf at 2008-9-10 10:52 PM:
Thanks to the friend on the 4th floor, you helped me solve the problem, but it's useless for you to post the recovery because you have prohibited running. Can your recovery batch processing still run? But thank you very much!

Run directly in the "Run" dialog box.

How to set up disabling Windows scripts?

reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v Hidden /t reg_dword /d 00000000 /f
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v HideFileExt /t reg_dword /d 00000001 /f
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v ShowSuperHidden /t reg_dword /d 00000000 /f
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v Disableregistrytools /t REG_DWORD /d 1
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmd.EXE" /v debugger /t reg_sz /d debugfile.exe /f

In this way, it cannot be restored with REG. If anyone has a good move, please share it. Thank you! I want to be able to use it when I need it and prohibit it when I don't!
I don't know if the script can realize removing the prohibition. Batch processing and registry are definitely not okay.

Last edited by mfdcxnf on 2008-9-12 at 08:18 PM ]

Signature="$CHICAG0$"



AddReg=My.Add.Reg:



HKCU,"SOFTWARE\Microsoft\windows\currentversion\policies\system","disableregistrytools",0x00010001,"0"

Dim WSHShell

Set WSHShell =CreateObject("WScript.Shell")

WSHShell.RegWrite "HKCU\SOFTWARE\Microsoft\windows\currentversion\policies\system\disableregistrytools",0, "REG_DWORD"

Is xxx.inf okay?

Signature="$CHICAG0$"



AddReg=My.Add.Reg:



HKCU,"SOFTWARE\Microsoft\windows\currentversion\policies\system","disableregistrytools",0x00010001,"0"

What about xxx.vbs?

Dim WSHShell

Set WSHShell =CreateObject("WScript.Shell")

WSHShell.RegWrite "HKCU\SOFTWARE\Microsoft\windows\currentversion\policies\system\disableregistrytools",0, "REG_DWORD"

Last edited by HAT on 2008-9-15 at 04:37 PM ]

I have tested the code from the user above, but it still doesn't work

The code on floor 11 cannot unlock the registry? What is the error message?

It can't run on my machine either, and the error message is shown in the following picture:

Could it be that your computer has deleted several host files that interpret VBS operations? I remember some internet cafes do this like that