[1903, au] Disabling Powershell for students?

[supportman]

We've finally got our new 1903 image up and running and one last bit of feedback from students is they are able to launch and mess around with Powershell.

 

Has anyone found a way of disabling it in Windows 10?

[Primus]

Yes - use AppLocker

[Uber22]

i used sophos with application control, app blocker i cant seem to get working.

[supportman]

Yes - use AppLocker

Do you have an example of this? Are you using the scripts block or application?

Edited June 12, 2019 by supportman

[robyholmes]

Never used that before so will have a research, but is there no way to do it in standard Group Policy restrictions?

 

We use AppLocker but we also delete the shortcuts using GPP. You could do that short term while you look at AppLocker.

[Garacesh]

Never used that before so will have a research, but is there no way to do it in standard Group Policy restrictions?

 

AppLocker is part of Group Policy

[supportman]

AppLocker is part of Group Policy

[ATTACH=CONFIG]53795[/ATTACH]

Thanks great, does anyone have an example of how to block powershell this way?

[supportman]

It actually seems its easier to use this Group Policy:

 

User config >> Polices >> admin templates >> system >> don't run specified Windows Applications

Then add powershell.exe & powershell_ise.exe

 

Source:

http://www.edugeek.net/forums/windows-10/198700-applocker-block-cmd-powershell-but-allow-scripts-via-gpo-logon-scripts.html

Edited June 12, 2019 by supportman

[ChrisMiles]

Might not need saying, but be careful with this if you use powershell login scripts...