Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have three accounts on my PC:

  • Administrator
  • Account_1 (Limited)
  • Account_2 (Limited)

What I want is to prevent Account_2 from accessing cmd.exe and taskmgr and permit Account_1 to access it easily.

I tried Windows 7's security options, but I was unable to add Account_2 to the list and deny the Read, Write & Execute access.

share|improve this question

migrated from May 2 '11 at 13:13

This question came from our site for professional and enthusiast programmers.

What version of Win7? Professional and Ultimate give you access to Group Policies, which are designed for this sort of thing. – Phoshi May 2 '11 at 13:19
Ultimate. Group policies will disable the app for all users even the administrator :S – 0xab3d May 2 '11 at 13:35

Try AppLocker. A bit of a sledge hammer for this task but you can easily use it to scope to a user or group of users.

What Is AppLocker? Technet document

share|improve this answer

Try using XCACLS to set the permissions. Perhaps you can override the Windows UI.

Also, make sure that you are the owner of the file before trying to change permissions. In Windows 7 you can change the owner like this:

  • right-click the file and select Properties
  • go to Security tab
  • click the Advanced button
  • go to the Owner tab and use Edit button to change the owner to your current user account
  • you should now be able to edit the permissions through the original Security tab or through XCACLS.EXE
share|improve this answer
I know, but I think CMD and taskmgr are Windows-protected files, so it is not easy to change neither the owner nor the security's permissions. – 0xab3d May 4 '11 at 17:05
Did you try my suggestion? It worked on my Windows 7. – mrnx May 4 '11 at 18:32
i will see it... thnx a lot – 0xab3d May 6 '11 at 22:01

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .