how to disable powershell

Page 2 of 2 FirstFirst 12
  1. TairikuOkami's Avatar
    Posts : 4,693
    Windows Home Dev 21xxx x64
       #11

    PS can be disabled via ExecutionPolicy, but that can be easily bypassed via, you can guess, via PS.

    https://blog.netspi.com/15-ways-to-b...ecution-policy

    Mystere said:
    What do you mean by "exploitable processes"? It's nor more exploitable than the command prompt. In fact, it has significant security above and beyond what Command Prompt offers to prevent exploits

    Actually majority of malware use WSH or PS to infect, especially ransomware and exploits without user intervention.

    Malware Created with Microsoft PowerShell Is on the Rise

    https://securelist.com/blog/research...rshell-malware

    Powershell or WSH are completely useless for common users, so there is no reason to keep it available.

    Today: https://threatpost.com/latest-window...ecution/119887
    Last edited by TairikuOkami; 16 Aug 2016 at 14:38.
      My Computer

  2. Mystere's Avatar
    Posts : 3,257
    Windows 10 Pro
       #12

    TairikuOkami said:
    Powershell or WSH are completely useless for common users, so there is no reason to keep it available.
    Except that it is a requirement for many new kinds of maintenance a regular user might have to do. For instance, you can't uninstall and reinstall many apps without powershell.

    Still, it's easy to disable it via group policy.

    How to Block an Application or .EXE from Running in Windows
      My Computer

  3. shmu26's Avatar
    Posts : 346
    windows 10 pro x64 20H2
    Thread Starter
       #13

    Mystere said:
    Except that it is a requirement for many new kinds of maintenance a regular user might have to do. For instance, you can't uninstall and reinstall many apps without powershell.

    Still, it's easy to disable it via group policy.

    How to Block an Application or .EXE from Running in Windows
    it seems that there are ways around this simple form of blocking
    PowerShell - One Tool to Rule Them All
    but with Process Lasso, you can automatically terminate any powershell process or script interpreter.
    under the options menu you have "configure disallowed processes", and and after adding your list of processes, you should put a tick in "match wildcards"
      My Computers


 
Page 2 of 2 FirstFirst 12

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 22:32.
Find Us




Windows 10 Forums