Disable user CMD prompt access via Registry Key

Press Windows key + R to launch the Run dialog.

Type regedit and click OK or press Enter.

Navigate to the following section in Registry Editor: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows

Right-click the Windows key and select New > Key from the menu.

Name the key to System.

Right-click the newly created System key and select New > DWORD (32-bit) Value

Name the new value at DisableCMD, and set its value data to 2 to disable the prompt but allow batch files. Or set it to 1 to disable the prompt and prevent batch files from running.

After entering a value, click OK

Close out of the Registry Editor and restart Windows

Now the Command Prompt is disabled for the user. If you want to re-enable it set the DisableCMD value to 0 instead.

Special thanks to GroovyPost HowTo blog and post author Brian Burgess for for the details on this registry change.