You can use application policies
Description of the Software Restriction Policies in Windows XP
User will be restricted to what they can do anyway.
Our school recently updated to Windows 7 and I am trying to find how to disable PowerShell for our student accounts. I have scoured the GPO but have not come up with anything in there similar to disabling the command prompt. How do you disable PowerShell for student accounts?
can you not just block powershell's EXE from running?
You could set PowerShell's execution policy to AllSigned via a policy called "Turn on Script Execution" under...
This would enable you to run PowerShell scripts yourself (as long as they were signed), but the students wouldn't be able to.Code:Computer Configuration\Administrative Templates\Windows Components\Windows PowerShell
I'm pretty sure that Powershell is blocked with the same gpo's that block the cmd prompt... (ie no extra config needed)
Set-ExecutionPolicy AllSigned will still let the students run the console and execute one-line commands, just not run scripts. I'd suggest you block them using application control. I have command.com, powershell.exe and powershell_ise.exe in here.
There are currently 1 users browsing this thread. (0 members and 1 guests)