Test for cmd?
The CMD allows access to basically everything on your machine so its useful to have it disabled ;)
Click Start, and in the Run box type: gpedit.msc and press enter.
In the Group Policy Window, browse to the User Configuration\Administrative Templates and highlight the System folder.
In the System folder, double-click "Prevent access to the command prompt."
Change the Setting to Enabled, then click Ok.
When entering the command prompt, you should now receive a prompt similar to the example below.
The command prompt has been disabled by your administrator.
Press any key to continue . . .
If you wish to re-enable this feature, follow the above steps. However, instead of setting the option to "Enabled", change it to the default setting of "Not configured."