Solved

How do you disable Powershell in windows 7 PRO local machine

Posted on 2016-10-18
8
46 Views
Last Modified: 2016-10-18
where do you go in gpedit.msc to disable standard users from using and accessing power shell?
Windows 7 Pro
0
Comment
Question by:Tim Berry
  • 4
  • 3
8 Comments
 
LVL 90

Expert Comment

by:John Hurst
ID: 41848780
Powershell needs admin authority to do many things and in standard mode should not cause much harm.

Accordingly, standard users cannot use cmd.exe with Run as Administrator so you should be fine that way.
0
 
LVL 1

Author Comment

by:Tim Berry
ID: 41848803
John,  Thank you for your reply.  The environment im in.... i need to lock the users down. This will be in a lab accessed by those in corrective custody. Is best if it doesn't come up at all.
gpedit.msc  User Config\AdminTemplats\System  don't run specified windows apps.   I added power-shell to the list.  BUT this blocks it for administrators as well. I just want to block standard users.
0
 
LVL 90

Expert Comment

by:John Hurst
ID: 41848807
See if a standard user can do anything important as a standard user. I do not think so. Powershell standard cannot access the registry or program folders, cannot change users .
0
 
LVL 1

Author Comment

by:Tim Berry
ID: 41848818
but they can create folders in areas not desired and other things.

I know there are some back doors I have already experienced here in the facility.   If possible, I would like to block power-shell from coming up at all if they are a standard user.  While I understand you feel there is no damage that can be done... I am trying to not take away the full function of the OS so they can learn... but at the same time control folders created and what they are storing.
 
I really dont want/need to get in depth as to why I need this... If it is possible I want to block powrshell form standard users.
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 90

Expert Comment

by:John Hurst
ID: 41848831
Here is a Microsoft thread for disabling powershell with Group Policy.

https://community.spiceworks.com/topic/1183987-disabling-powershell-with-group-policy

People can also use Explorer to change and create folders.
0
 
LVL 53

Accepted Solution

by:
McKnife earned 500 total points
ID: 41848977
John, you are linking a Q&A forum, which used to be against ee guidelines. Or has that changed?
An answer would be to simply change the ACL for "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" so that users may not read it.
1
 
LVL 1

Author Comment

by:Tim Berry
ID: 41848989
@McKnife  This is not what I was thinking... but this is another way to skin the cat and will get my goal achieved.  Thank you kindly!
0
 
LVL 1

Author Closing Comment

by:Tim Berry
ID: 41848990
That will work!  Thank you very much.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

PRTG Network Monitor lets you monitor your bandwidth usage, so you know who is using up your bandwidth, and what they're using it for.
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now