Test for cmd?

The CMD allows access to basically everything on your machine so its useful to have it disabled ;)

Click Start, and in the Run box type: gpedit.msc and press enter. In the Group Policy Window, browse to the User Configuration\Administrative Templates and highlight the System folder. In the System folder, double-click "Prevent access to the command prompt." Change the Setting to Enabled, then click Ok. When entering the command prompt, you should now receive a prompt similar to the example below. The command prompt has been disabled by your administrator. Press any key to continue . . . If you wish to re-enable this feature, follow the above steps. However, instead of setting the option to "Enabled", change it to the default setting of "Not configured."