Stop Windows 10 search from running commands

We disable the run box on our network through a GPO which for anything upto 10 stopped you browsing to UNC paths or running commands of any kind. In 10 it has the same effect UNLESS you use the search box on the task bar to search for a UNC path or command it offer to run it as shown in the image.

enter image description here

This bypasses the policy and lets users access commands they shouldn't.

I can't find a way to stop it, removing the search box still lets the user search by typing with the start menu open.

Anyone know how to stop it offering to run commands or browse to shares? I would be happy with restricting it to searching Programs only.

We have the following policies enabled:

User Configuration\Policies\Administrative Templates\Start Menu and Taskbar\Remove Run menu from Start Menu.

and

User Configuration/Administrative Templates/System/Prevent access to the command prompt


Solution 1:

So I just realized this after looking at it.

You need to disable the RUN feature in the search index Via Group Policy.

User Configuration\Policies\Administrative Templates\Start Menu and Taskbar\Remove Run menu from Start Menu.

Then link the policy.

You can also prevent access from Command prompt being ran by the user.

User Configuration/Administrative Templates/System

In the right side pan choose. Prevent access to the command prompt Double click and enable it.

Hope this helps.

Coratana or the Search index is using the RUN Feature to run these commands. Once the user types a command in RUN is is transferred to a Terminal and ran.