# http://geekswithblogs.net/GinoAbraham/archive/2011/11/03/block-application-pages-and-form-pages-in-sharepoint-2010.aspx

# Block Application pages and Form Pages in Sharepoint 2010 
# By default Sharepoint doesn’t blocks user with limited access from visiting application pages (for ex _layouts/viewlsts.aspx).
# Someone who knows the URL, can go to this page.
# We can avoid this by change the limited access to lockdown mode. Use the command below.
  

# Turn on lockdown mode for a site collection
stsadm -o activatefeature -url <site collection url> -filename ViewFormPagesLockDown\feature.xml

# Turn off lockdown mode for a site collection
stsadm -o deactivatefeature -url <site collection url> -filename ViewFormPagesLockDown\feature.xml

# For more info on this visit http://technet.microsoft.com/en-us/library/cc263468(office.12).aspx#section6