How to block command prompt by gpo windows 10 & 11
To disable the Command Prompt shell on Windows, use these steps:
Open run and type gpedit.msc
select the top result to open the Local Group Policy Editor.
Browse the following path: User Configuration - Administrative Templates - System
On the right side, double-click the Prevent access to the command prompt policy.