asked on

Port to GPO & deploy segment by segment

We have manually disabled PowerShell on a few PCs : refer to attachment 1.

As there are close to 3000 PCs in our place, it's not feasible to do it this way.

Also I wanted to disable it batch by batch (by network subnet/segment or
by department) in case things break, impact is not so widespread.

Q1:
How can this disabling of PwrShell be done in GPO ?

Q2:
is there a way to use SCCM or MS Desktop central or sort of scripts for
me to deploy this batch by batch (or by IP segment) ? Kindly elaborate
the method
Disable_PwrShell.jpg

SOLUTION

arnold

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

ASKER CERTIFIED SOLUTION

Robert

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION

Shaun Vermaak

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

sunhux

ASKER

Thanks chaps; Shaun's method is random ie not by IP segment.

Rob's method is what I'm looking for; as I'm not Wintel-trained, would Rob
/anyone be able to elaborate step by step on how to do disable PowerShell
(ie the equivalent of the screen I've attached earlier) in GPO?

Also, where is the wmi filter applied in GPO?

arnold

look at a detail of a GPO, on the main screen, at the bottom (security filter) wmi filter. you have to define the wmi filter, and then choose it from the drop down box, the default is none.

sunhux

ASKER

Thanks.

For the screen I've attached in the original post, how is this "disabling of PowerShell"
done in GPO?

SOLUTION

Robert

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION

arnold

membership