After they login they get to go do stuff.
What I'm worried about is the user running a malicious batch file.
If you spam input in CMD and type
Code: Select all
doskey /history
This could go into a file and then so much for the MD5 hash, you have their password.
My question is, how can you make doskey clear the history?