locked
Disable Powershell on a Domain RRS feed

  • Question

  • Good afternoon, I have a requirement of the security area in relation to Powershell. What are the consequences if I disable powershell and if there is a procedure to restrict it only to administrators? Thank you very much.
    Thursday, May 3, 2018 7:38 PM

Answers

  • Not necessary.  PowerShell will not execute scripts for users if a GPO sets standard users as "Restricted" which is the default.

    You never want to totally disable PS as it is a required component of all modern Windows systems.


    \_(ツ)_/

    • Proposed as answer by Martien van Dijk Thursday, May 3, 2018 7:57 PM
    • Marked as answer by alopezt24 Wednesday, May 9, 2018 1:52 PM
    Thursday, May 3, 2018 7:46 PM
  • Leave the Execution Policy as default to prevent users from downloading and running scripts. Ensure users are running at least privilege so they cannot change the policy.

    • Marked as answer by alopezt24 Wednesday, May 9, 2018 1:52 PM
    Saturday, May 5, 2018 9:02 PM

All replies

  • Not necessary.  PowerShell will not execute scripts for users if a GPO sets standard users as "Restricted" which is the default.

    You never want to totally disable PS as it is a required component of all modern Windows systems.


    \_(ツ)_/

    • Proposed as answer by Martien van Dijk Thursday, May 3, 2018 7:57 PM
    • Marked as answer by alopezt24 Wednesday, May 9, 2018 1:52 PM
    Thursday, May 3, 2018 7:46 PM
  • Many admin GUI tools now run PowerShell commands under the covers.

    Richard Mueller - MVP Enterprise Mobility (Identity and Access)

    Thursday, May 3, 2018 9:19 PM
  • Leave the Execution Policy as default to prevent users from downloading and running scripts. Ensure users are running at least privilege so they cannot change the policy.

    • Marked as answer by alopezt24 Wednesday, May 9, 2018 1:52 PM
    Saturday, May 5, 2018 9:02 PM