Disable Windows Terminal

[jmak]

I'm creating security policies for some users who I don't want to have access to cmd or powershell. I have them blocked in group policy for the required users, but they can still open Terminal. Is there any straightforward way to do that? At the minute I'm playing with deprovisioning the app for some users, but I haven't got my head around how I'll control who does it does not get it.

 

Many thanks

[ConTheITGuy]

Hi, you can block terminal on GPO using Application Control Policies I have it blocked for all pupils and staff.

 

Thanks

[ITGURU]

Exes blocked by do not allowed specific programs to be run policy

 

wt.exe

Windowsterminal.exe

 

and the App is blocked via Applocker

[kidpressingbuttons]

I have tried to block terminal in applocker and via the do not allow specific methods but nothing appears to be working?

[jamiegrimwood]

It might sound simple and obvious but did you try gpupdate /force to force a refresh?

[Leonao1]

yea a gpupdate/force works really well Edited April 22, 2024 by Leonao1

[georgeescott]

Although Don't run specified Windows applications would probably do, without AppLocker it wouldn't stop the user from having a renamed copy of it that they could run.

 

We've blocked it via AppLocker but allow it for Administrators. Here's our AppX XML for it: