Disabling "Open command prompt window"

[Sonny]

Is it possible to remove or disable the button "Commands" - "Open command prompt window" from Total Commander settings?

I'd like to disable ways to start cmd.exe as much as possible. I know it's possible to disable the Command line at the bottom of the window, for example using RestrictInterface=2 in wincmd.ini. I'd like to also like to disable the command prompt button from the menu.

[Stefan2]

I'd like to also like to disable the command prompt button from the menu.

That's just a plain text file, see \LANGUAGE\WCMD_ENG.MNU

Search in the MNU for 'prompt' and remove the whole 'MENUITEM' line. Save and restart TC.

Code: Select all

POPUP "&Commands"
  MENUITEM "CD &Tree...\tAlt+F10", cm_CDtree
  ....
  MENUITEM "Go &Back\tAlt+Left Arrow", 570
  MENUITEM SEPARATOR
  MENUITEM "Open comman&d prompt window", cm_ExecuteDOS
  MENUITEM SEPARATOR
  MENUITEM "Br&anch View (With Subdirs)\tCtrl+B", 2026
  MENUITEM "&Open Desktop Folder", 2121
  ....  MENUITEM "Target&=Source", cm_matchsrc
END_POPUP

HTH?
 

[Horst.Epp]

Is it possible to remove or disable the button "Commands" - "Open command prompt window" from Total Commander settings?

I'd like to disable ways to start cmd.exe as much as possible. I know it's possible to disable the Command line at the bottom of the window, for example using RestrictInterface=2 in wincmd.ini. I'd like to also like to disable the command prompt button from the menu.

Trying to get security by obscurity is an useless effort.
The users will start other programs like Explorer and start cmd.exe from it.
So what is the real benefit from such configuration ?

[Dalai]

The users will start other programs like Explorer and start cmd.exe from it.

Or navigate to %SystemRoot%\system32 in TC and launch it from there. Or create a button in the button bar or an entry in the TC start menu that launches cmd.exe.

Sonny, please keep in mind that there are near endless possibilities to launch programs in Windows, even some you don't think of (like right-clicking in a common dialog, i.e. "Open", "Save" or "Save as"). Yes, most of them can be disabled via GPO, but probably not all of them, and restrictions might bring up other issues. Just saying.

[EDIT] Fixed typo [/EDIT]

Regards
Dalai

[ghisler(Author)]

You should better change the security settings of cmd.exe so your users can't run it.