Solved

How do you disable Powershell in windows 7 PRO local machine

Posted on 2016-10-18
8
287 Views
Last Modified: 2016-10-18
where do you go in gpedit.msc to disable standard users from using and accessing power shell?
Windows 7 Pro
0
Comment
Question by:Tim Berry
  • 4
  • 3
8 Comments
 
LVL 94

Expert Comment

by:John Hurst
ID: 41848780
Powershell needs admin authority to do many things and in standard mode should not cause much harm.

Accordingly, standard users cannot use cmd.exe with Run as Administrator so you should be fine that way.
0
 
LVL 1

Author Comment

by:Tim Berry
ID: 41848803
John,  Thank you for your reply.  The environment im in.... i need to lock the users down. This will be in a lab accessed by those in corrective custody. Is best if it doesn't come up at all.
gpedit.msc  User Config\AdminTemplats\System  don't run specified windows apps.   I added power-shell to the list.  BUT this blocks it for administrators as well. I just want to block standard users.
0
 
LVL 94

Expert Comment

by:John Hurst
ID: 41848807
See if a standard user can do anything important as a standard user. I do not think so. Powershell standard cannot access the registry or program folders, cannot change users .
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
LVL 1

Author Comment

by:Tim Berry
ID: 41848818
but they can create folders in areas not desired and other things.

I know there are some back doors I have already experienced here in the facility.   If possible, I would like to block power-shell from coming up at all if they are a standard user.  While I understand you feel there is no damage that can be done... I am trying to not take away the full function of the OS so they can learn... but at the same time control folders created and what they are storing.
 
I really dont want/need to get in depth as to why I need this... If it is possible I want to block powrshell form standard users.
0
 
LVL 94

Expert Comment

by:John Hurst
ID: 41848831
Here is a Microsoft thread for disabling powershell with Group Policy.

https://community.spiceworks.com/topic/1183987-disabling-powershell-with-group-policy

People can also use Explorer to change and create folders.
0
 
LVL 54

Accepted Solution

by:
McKnife earned 500 total points
ID: 41848977
John, you are linking a Q&A forum, which used to be against ee guidelines. Or has that changed?
An answer would be to simply change the ACL for "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" so that users may not read it.
1
 
LVL 1

Author Comment

by:Tim Berry
ID: 41848989
@McKnife  This is not what I was thinking... but this is another way to skin the cat and will get my goal achieved.  Thank you kindly!
0
 
LVL 1

Author Closing Comment

by:Tim Berry
ID: 41848990
That will work!  Thank you very much.
0

Featured Post

VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will inform Clients about common and important expectations from the freelancers (Experts) who are looking at your Gig.
A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

820 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question