|Well, that is the WRONG question to ask. Do you think it is "normal" that any account on a computer can run dangerous commands like FORMAT, FDISK, etc. ?|
You could made up a list of potential dangerous commands, and then you have the answer on your question.
But, you could of course not scan on these commands (in a batchfile) and just prevent these COMMANDS from being run by any stupid account, in the first place.
Because, you can SCAN (a batchfile) and PREVENT to run this batchfile as much as you want ... if you open Start\Run, and then just run the same commands (which are stored in the batchfile you prevented to run earlier) ...
... well, what kind of protection do you then have ?
This is a retorical question, you can answer to it if you want, still.