Windows Disabled Command Prompt Enumeration

info Nessus Plugin ID 164690

Synopsis

This plugin determines if the DisableCMD policy is enabled or disabled on the remote host for each local user.

Description

The remote host may employ the DisableCMD policy on a per user basis. Enumerated local users may have the following registry key:
'HKLM\Software\Policies\Microsoft\Windows\System\DisableCMD'

- Unset or 0: The command prompt is enabled normally.
- 1: The command promt is disabled.
- 2: The command prompt is disabled however windows batch processing is allowed.

See Also

http://www.nessus.org/u?b40698bc

Plugin Details

Severity: Info

ID: 164690

File Name: windows_disablecmd.nasl

Version: 1.2

Type: local

Agent: windows

Family: Windows

Published: 9/6/2022

Updated: 10/5/2022

Supported Sensors: Nessus Agent, Nessus

Vulnerability Information

CPE: cpe:/o:microsoft:windows

Required KB Items: SMB/Registry/Enumerated, WMI/LocalUsers/enumerated