Running commands in a restricted command prompt

There may be times on a penetration test where you run into a locked down environment and you can’t use cmd.exe

This is done in a few different ways.

Via the registry:
REG add HKCU\Software\Policies\Microsoft\Windows\System /v DisableCMD /t REG_DWORD /d 1 /f

Or, like the screenshot, set via the GUI:
Start -> Run -> gpedit.msc -> User Configuration -> Administrative Templates -> System ->