Windows 11 -22H2 Blocking Terminal

[tri_94]

Hi there

 

Just wondering how people are blocking access to Terminal.

 

I've tried via GPO "Don’t run specified Windows applications"

in which I've added: Powershell.exe OpenConsole.exe WindowsTerminal.exe, TerminalAZBridge.exe and wt.exe

 

However if i try and run Terminal from the start menu Terminal will open.

 

If i try and run Powershell or wt they don't run. OpenConsole and WindowsTerminal doesn't show in the start menu

 

So what methods are people using? from my understanding "software restriction policy" doesn't work on 22H2

 

Many thanks

Edited November 14, 2023 by tri_94

[mavhc]

SRP works, it's just buggy https://seclists.org/fulldisclosure/2023/Mar/1

 

Can't you uninstall it?

[tri_94]

SRP works, it's just buggy https://seclists.org/fulldisclosure/2023/Mar/1

 

Can't you uninstall it?

 

Thank you for that, i'll give that a go.

[ITGuyNW]

Best way I found was removing it when customising the WIM using WIMWitch

[ITGURU]

use applocker but you need to edit the policy from a windows 11 client with gpo installed. you can then select the app from the list of locally installed apps to block it.

that's what I did

[stevewill6]

Another one for applocker here.

[kidpressingbuttons]

Yep Applocker

[supportman]

Just run into this as well on our Windows 11 install.

 

Same issue that Group Policy not "Don’t run specified Windows applications" not working.

 

What are you specifically blocking in Applocker?

[supportman]

Just found this registry key very useful to remove the context menu option to "Open in Terminal"

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked]
"{9F156763-7844-4DC4-B2B1-901F640F5155}"=""