If you want to avoid that a user can access the MS-DOS prompt from Windows follow these steps

1. Open the properties dialog of the MS-DOS prompt
2. Select the Misc Tab
3. If the checkbox in the Termination box is checked, uncheck it
4. Select the Screen Tab of the MS-DOS properties dialog
5. Select the Window radio button in the Usage group.
6. Add the title of the MS-DOS Window to the forbidden windows list in the TimeWatcher Options Dialog
7. Add the title of the MS-DOS properties dialog window to the forbidden windows list in the TimeWatcher Options Dialog

This blocks the MS-DOS prompt while TimeWatcher is running