Hi,

We are using a Powershell logon script with a Windows 8.1 vdi solution. We also need to block users from opening and using powershell locally on the VDI desktop.

But the logonscript needs to be runned in the user context and when we block access to powershell.exe the logon script would not run.

We have looked at signing the logon script, but the powershell script still does not run when we block powershell.exe.

Anyone know of a way to allow running logonscripts in the user context and still block powershell.exe lo

Hi,

You can use Software Restriction Policies (SRPs) or Applocker to disable powershell from running. You can choose to restrict Powershell.exe through SRPs/Applocker.
Using Software Restriction Policies to Protect Against Unauthorized Software
http://technet.microsoft.com/en-us/library/cc507878.aspx
AppLocker Step-by-Step Guide
http://technet.microsoft.com/en-us/library/dd723686(WS.10).aspx

If you already tried these two methods but still couldn't meet your requirements, please feel free let us know.

Hi,

You can use Software Restriction Policies (SRPs) or Applocker to disable powershell from running. You can choose to restrict Powershell.exe through SRPs/Applocker.
Using Software Restriction Policies to Protect Against Unauthorized Software
http://technet.microsoft.com/en-us/library/cc507878.aspx
AppLocker Step-by-Step Guide
http://technet.microsoft.com/en-us/library/dd723686(WS.10).aspx

If you already tried these two methods but still couldn't meet your requirements, please feel free let us know.

Hi,

Did you find an answer to this, as I'm having the same problem - we restrict Powershell for pupils using Software Restriction Policies, but that prevents Powershell logon scripts from running.

Thanks, Jim.