SOLVED

Disabled CMD on WVD and now get issues logging in

%3CLINGO-SUB%20id%3D%22lingo-sub-2007168%22%20slang%3D%22en-US%22%3EDisabled%20CMD%20on%20WVD%20and%20now%20get%20issues%20logging%20in%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2007168%22%20slang%3D%22en-US%22%3E%3CP%3EGreeting%20All%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20setup%20a%20WVD%20Host%20pool%20and%20can%20connect%20it%20it%20fine%20but%20I%20am%20trying%20to%20lockdown%20the%20Desktop%20now%20by%20removing%20CMD%2C%20Registry%20and%20Powershell%20for%20my%20users.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20created%20a%20GPO%20which%20does%20this%20now%20but%20now%20when%20I%20log%20to%20administer%20the%20box%20via%20RDP%20I%20get%20this%20screen.(see%20screenshot%20CMD%20issue1)%3C%2FP%3E%3CP%3EUsrLogon.cmd%20Disabled%20by%20your%20administrator%20(see%20screenshot%20CMD%20issue2)%20Only%20when%20I%20close%20the%20screen%20does%20the%20desktop%20finally%20load%20a%20few%20seconds%20later.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20want%20to%20disable%20CMD%20for%20users%20but%20it%20looks%20like%20WVD%20requires%20it%20to%20run%20a%20start%20up%20script%3F%3C%2FP%3E%3CP%3EAnyone%20trying%20to%20achieve%20that%20same%20thing%2C%20any%20advice%20much%20appreciated.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2007639%22%20slang%3D%22en-US%22%3ERe%3A%20Disabled%20CMD%20on%20WVD%20and%20now%20get%20issues%20logging%20in%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2007639%22%20slang%3D%22en-US%22%3EOk%20folks%20managed%20to%20sort%20this%20out%20at%20the%20end.%20I%20had%20to%20change%20the%20following%20GPO%3CBR%20%2F%3EDisable%20the%20command%20prompt%20script%20processing%20also%3F%20No%3CBR%20%2F%3E%3CBR%20%2F%3EThis%20then%20allowed%20the%20usrlogon.cmd%20process%20to%20run%20successfully.%3CBR%20%2F%3EBut%20Prevent%20access%20to%20the%20command%20prompt%20is%20still%20enabled%2C%20so%20all%20good.%3CBR%20%2F%3EHope%20this%20helps%20others.%3C%2FLINGO-BODY%3E
Occasional Contributor

Greeting All,

 

I have setup a WVD Host pool and can connect it it fine but I am trying to lockdown the Desktop now by removing CMD, Registry and Powershell for my users.

 

I have created a GPO which does this now but now when I log to administer the box via RDP I get this screen.(see screenshot CMD issue1)

UsrLogon.cmd Disabled by your administrator (see screenshot CMD issue2) Only when I close the screen does the desktop finally load a few seconds later.

 

I want to disable CMD for users but it looks like WVD requires it to run a start up script?

Anyone trying to achieve that same thing, any advice much appreciated. 

 

1 Reply
best response confirmed by RushadAnk (Occasional Contributor)
Solution
Ok folks managed to sort this out at the end. I had to change the following GPO
Disable the command prompt script processing also? No

This then allowed the usrlogon.cmd process to run successfully.
But Prevent access to the command prompt is still enabled, so all good.
Hope this helps others.