Prevent Users from running Powershell via GPO

  • 31 July 2019
  • 0 replies

Userlevel 2
Badge +2
To enable this policy setting, Run gpedit.msc and navigate to the following setting:

User configuration > Administrative templates > System

1. Double-click on Don't run specified Windows applications.

2. Click the radio button Enabled to enable the policy.

3. Click the Show button next to List of disallowed applications and add powershell.exe to the list and click OK.

4. Test by attempting to run Powershell.

The information presented in this article has been taken from the Malware Prevention Guide.

0 replies

Be the first to reply!