prevent users to access cmd