Prevent access to the command prompt

The command prompt, in Windows, is used to run commands that perform advanced administrative functions. However, in the hands of malicious users, the command prompt can be used to compromise the integrity of the system. To prevent any harm to your network, restrict access to the command prompt using the Prevent access to the command prompt policy.User Configuration > Administrative Templates > System