Solved

Exchange '10 ExecutionPolicy (RemoteSigned, Restricted, etc.) Setting

Posted on 2013-06-24
5
425 Views
Last Modified: 2013-06-27
On SP3 (Enterprise) and a third-party application had use set the configuration to "Set-ExecutionPolicy RemoteSigned" (then Yes to confirm).

We elected not to go with the solution but it seems that setting may still be on/active in our Exchange environment and we just want to make sure the setting is not any different by default or leaving any holes in security.

By default what should the setting for Get-ExecutionPolicy be?

By default when I type Get-ExecutionPolicy -List, it shows the ExecutionPolicy as RemoteSigned (not Undefined).
0
Comment
Question by:RTM2007
  • 3
  • 2
5 Comments
 
LVL 63

Accepted Solution

by:
Simon Butler (Sembee) earned 500 total points
ID: 39273095
The default is restricted. However most sites I work with use RemoteSigned, as it allows the use of self created ps1 files.

Simon.
0
 
LVL 2

Author Comment

by:RTM2007
ID: 39273126
What are the security concerns with leaving the LocalMachine scope set to RemoteSigned as opposed to undefined?
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39273146
Undefined means anything can be run, so that could include scripts that are unsigned and therefore could be malicious.

The four definitions are here:
http://technet.microsoft.com/en-us/library/ee176847.aspx

Simon.
0
 
LVL 2

Author Comment

by:RTM2007
ID: 39273151
So is Undefined essentially the same as Unrestricted from the list?

Essentially does that mean RemoteSigned is safer?
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39273178
I wouldn't like to say. Undefined means there is no policy at all. I don't know if Unrestricted has no restrictions at all.

Simon.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Exchange transport rule NDR not being received by external senders 7 41
Exchange 2013 certificate 8 38
Exchange 2010 6 22
exchange 2007 9 12
Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
Read this checklist to learn more about the 15 things you should never include in an email signature.
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question