Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

How do you disable Powershell in windows 7 PRO local machine

Posted on 2016-10-18
8
Medium Priority
?
1,354 Views
Last Modified: 2016-10-18
where do you go in gpedit.msc to disable standard users from using and accessing power shell?
Windows 7 Pro
0
Comment
Question by:Tim Berry
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
8 Comments
 
LVL 98

Expert Comment

by:John Hurst
ID: 41848780
Powershell needs admin authority to do many things and in standard mode should not cause much harm.

Accordingly, standard users cannot use cmd.exe with Run as Administrator so you should be fine that way.
0
 
LVL 1

Author Comment

by:Tim Berry
ID: 41848803
John,  Thank you for your reply.  The environment im in.... i need to lock the users down. This will be in a lab accessed by those in corrective custody. Is best if it doesn't come up at all.
gpedit.msc  User Config\AdminTemplats\System  don't run specified windows apps.   I added power-shell to the list.  BUT this blocks it for administrators as well. I just want to block standard users.
0
 
LVL 98

Expert Comment

by:John Hurst
ID: 41848807
See if a standard user can do anything important as a standard user. I do not think so. Powershell standard cannot access the registry or program folders, cannot change users .
0
Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 1

Author Comment

by:Tim Berry
ID: 41848818
but they can create folders in areas not desired and other things.

I know there are some back doors I have already experienced here in the facility.   If possible, I would like to block power-shell from coming up at all if they are a standard user.  While I understand you feel there is no damage that can be done... I am trying to not take away the full function of the OS so they can learn... but at the same time control folders created and what they are storing.
 
I really dont want/need to get in depth as to why I need this... If it is possible I want to block powrshell form standard users.
0
 
LVL 98

Expert Comment

by:John Hurst
ID: 41848831
Here is a Microsoft thread for disabling powershell with Group Policy.

https://community.spiceworks.com/topic/1183987-disabling-powershell-with-group-policy

People can also use Explorer to change and create folders.
0
 
LVL 56

Accepted Solution

by:
McKnife earned 2000 total points
ID: 41848977
John, you are linking a Q&A forum, which used to be against ee guidelines. Or has that changed?
An answer would be to simply change the ACL for "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" so that users may not read it.
1
 
LVL 1

Author Comment

by:Tim Berry
ID: 41848989
@McKnife  This is not what I was thinking... but this is another way to skin the cat and will get my goal achieved.  Thank you kindly!
0
 
LVL 1

Author Closing Comment

by:Tim Berry
ID: 41848990
That will work!  Thank you very much.
0

Featured Post

Understanding Web Applications

Without even knowing it, most of us are using web applications on a daily basis. Gmail and Yahoo email, Twitter, Facebook, and eBay are used by most of us daily—and they are web applications. We often confuse these web applications tools for websites.  So, what is the difference?

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Originally, this post was published on Monitis Blog, you can check it here . It goes without saying that technology has transformed society and the very nature of how we live, work, and communicate in ways that would’ve been incomprehensible 5 ye…
This article is a collection of issues that people face from time to time and possible solutions to those issues. I hope you enjoy reading it.
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question