I can't run Windows PowerShell

Page 1 of 2 12 LastLast

  1. Posts : 5
    Windows 10 Pro
       #1

    I can't run Windows PowerShell


    Hey guys, can you help me?
    I can't run WIndows Powershell (even as admin or not),
    it say "C:\Users\ASUS K84L\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk",
    I can't run Windows PowerShell-screenshot-2-.pngi try to run via directory and then windows say "This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator."
    I can't run Windows PowerShell-screenshot-3-.png
    Any idea?
    Any help would be appreciated. Sorry with my bad english
      My Computer


  2. Posts : 98
    windows
       #2

    "This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator."
    The message is clear: Restricted access has been set for certain(s) program(s). Do you own the computer? Are you an administrator?

    And of course: Is your machine infected?

    Try to create a new user account and check if the issue persists.

    Since you're running Win10 Pro, you have access to Group Policy. There is an Administrative Template "Don't run specified Windows Applications". Run it.

    See https://www.microsoft.com/en-us/down....aspx?id=48257
    and https://blogs.technet.microsoft.com/...ive-templates/
      My Computer


  3. Posts : 98
    windows
       #3

    Maybe I came up too strong. Forget about Administrative Templates for the moment.

    Instead, using the registry editor, navigate to: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies
    and look at what's there, like a key named PowerShell in your case.
      My Computer


  4. Posts : 5,183
    Windows 11 Home
       #4

    That message looks similar to what I have, because I have blocked PS from running, like this:

    Code:
    reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "DisallowRun" /t REG_DWORD /d "1" /f
    reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "1" /t REG_SZ /d "powershell.exe" /f
    reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "2" /t REG_SZ /d "powershell_ise.exe" /f
      My Computer


  5. Posts : 5
    Windows 10 Pro
    Thread Starter
       #5

    yeah, i found it
    I can't run Windows PowerShell-screenshot-4-.png
    Should I delete that registry key?
      My Computer


  6. Posts : 2,068
    Windows 10 Pro
       #6

    TairikuOkami said:
    That message looks similar to what I have, because I have blocked PS from running, like this:

    Code:
    reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "DisallowRun" /t REG_DWORD /d "1" /f
    reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "1" /t REG_SZ /d "powershell.exe" /f
    reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "2" /t REG_SZ /d "powershell_ise.exe" /f
    Is there a reason you do not want powershell to be able to run?
      My Computers


  7. Posts : 5,183
    Windows 11 Home
       #7

    vengeance455 said:
    Should I delete that registry key?
    Yes.


    pparks1 said:
    Is there a reason you do not want powershell to be able to run?
    Malware prevention, it is not like PS is required by anything. I actually remove PS as well.

    Lets Unpack: Dridex Loader | MalwareTech
    15 Ways to Bypass the PowerShell Execution Policy
    The rise of .NET and powershell malware - Securelist
    UAC Bypass Using eventvwr.exe and Registry Hijacking | enigma0x3
      My Computer


  8. Posts : 2,068
    Windows 10 Pro
       #8

    Sure, .net tools could be used to craft attacks, but I am pretty sure very few boxes were compromised by people going through weaknesses in powershell. I could see a questionable user, who insists on running as an admin, executing a powershell script which does compromise the system.

    I am a big powershell user, and am going to GUI less Windows server which must be managed by powershell remotely. Different strokes I guess.
      My Computers


  9. Posts : 5
    Windows 10 Pro
    Thread Starter
       #9

    TairikuOkami said:
    Yes.
    I have delete that registry, but after I restart my laptop, that registry appear again
    I can't run Windows PowerShell-2017-04-29_01-23-05.jpg
    i think, maybe the main problem is on Task Scheduler or Services which cause registry re-adding again
      My Computer


  10. Posts : 5,183
    Windows 11 Home
       #10

    Check, if it is disabled in group policy:

    Gpedit.msc\User Configuration\Administrative Templates\System\Don't run specified Windows applications

    Don,t Run Specified Windows Application, Run Only Specified Windows Application - YouTube
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 17:43.
Find Us




Windows 10 Forums