Prevent certain users from accessing cmd, run and system32?

[Vorpike]

Looks like the only way to prevent cmd and run is editing the registry, but that denies it for all users, and denied users and easily edit it back. Is there a way to prevent non-admins from using it? Also, how to I prevent access to system32? I made it so users can't access, but admins count as users, and you can still view the files, just can't run any of them.

 

[USAFRet]

Lets back up a step or two...

Why are we trying to do this?
Home environment? Corporate?

 

[Vorpike]

Lets back up a step or two...

Why are we trying to do this?
Home environment? Corporate?

Sorry...home.

 

[USAFRet]

The users for which you do not want to have that level of access, do not give them admin rights. Standard users are pretty limited as to what they can do via cmd.