Block PowerShell but allow Store updates. RRS feed

  • Question

  • We have a policy that blocks powershell.exe and powershell_ise.exe for certain users.  Shortly after that, we started getting "this app is blocked" messages for PowerShell right after a new user logs on for the first time.  I may be wrong, but I believe it is the OneDrive app trying to update automatically upon logon.  Assuming it is the Windows Store trying to update apps by running a PowerShell script in a user context, what script/command is it running.  If I know that, I can white list the process will still blocking PowerShell.  

    If it's not the Windows Store calling PowerShell at startup, what else would be running PowerShell when a new user logs in?  We don't have startup scripts or anything like that.

    Monday, March 27, 2017 7:35 PM

All replies