Disable Windows 2000 / XP command promt and execution of batch files

Locking down Windows 2000 or Windows XP? Need to disable the command shell and/or batch files. You can use the following registry hack: Hive: HKEY_CURRENT_USER Key: Software\Policies\Microsoft\Windows\System Name: DisableCMD Type: REG_DWORD Value: 0 enable command prompt and batch files Value: 1 disable command prompt and batch files Value: 2 disable command prompt but allow batch files