I am creating a local group policy to lockdown an XP work station. I have used "Run only allowed Windows applications" to create a whitelist of aproved apps. CMD.exe is on that list but I want to use "Prevent access to Command Prompt" to restrict normal users from using the comand prompt. That being said, I have some .cmd script files that admins use to run certain things. When I enable "Prevent access to Command Prompt" I allow access to run cmd script files.
My problem is that when I go to run one of my .cmd scripts, the infamious rescritions dialog pops up.
What am I doing wrong?
Thanks for any help!