When you try to start CMD you get 'Command Prompt has been disabled by your administrator'. I got around it by hex-editing CMD.EXE and replacing the P in the unicode POLICIES string inside CMD to a D, ...