How to handle PowerShell

[bmittleider]

Our school recently updated to Windows 7 and I am trying to find how to disable PowerShell for our student accounts. I have scoured the GPO but have not come up with anything in there similar to disabling the command prompt. How do you disable PowerShell for student accounts?

[sukh]

Hi

 

You can use application policies

 

Description of the Software Restriction Policies in Windows XP

 

User will be restricted to what they can do anyway.

 

 

 

Sukh

[timbo343]

can you not just block powershell's EXE from running?

[Arthur]

You could set PowerShell's execution policy to AllSigned via a policy called "Turn on Script Execution" under...

 

Computer Configuration\Administrative Templates\Windows Components\Windows PowerShell

 

This would enable you to run PowerShell scripts yourself (as long as they were signed), but the students wouldn't be able to.

[bmdixon]

I'm pretty sure that Powershell is blocked with the same gpo's that block the cmd prompt... (ie no extra config needed)

[dhicks]

Our school recently updated to Windows 7 and I am trying to find how to disable PowerShell for our student accounts.

 

Is there a particular reason why?

[chrisbrown]

Set-ExecutionPolicy AllSigned will still let the students run the console and execute one-line commands, just not run scripts. I'd suggest you block them using application control. I have command.com, powershell.exe and powershell_ise.exe in here.