How to disable PowerShell on Windows 10
It’s possible to disable PowerShell, and in this guide, we’ll show three methods to complete this task on Windows 10.
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
On Windows 10, PowerShell is a powerful cross-platform tool that allows you to run scripts and commands to change system settings, manage features, troubleshoot problems, and automate tasks.
Although it is a useful command-line shell, in some situations, you may need to disable it to make sure that users do not make unwanted changes or execute scripts with malicious commands. And other times, you may need to restrict access to PowerShell to comply with the company’s policies.
Whatever the reason it might be,Windows 10offers multiple ways to disable access to the built-in version of PowerShell or the standalone version of the tool, PowerShell 7.
In this Windows 10 guide, we will walk you through three different ways to disable access to PowerShell, including PowerShell 7.
How to block PowerShell access using Group Policy
If you use Windows 10 Pro (or Enterprise), the easiest way to disable access to PowerShell is using the Local Group Policy Editor.
To disable PowerShell on Windows 10, use these steps:
Once you complete the steps, users will no longer be able to launch and use PowerShell.
Get the Windows Central Newsletter
All the latest news, reviews, and guides for Windows and Xbox diehards.
In the case you change your mind, you can roll back the previous settings using the same instructions, but onstep No. 5, select theNot Configuredoption.
We are focusing this guide on disabling PowerShell for all users, but you can also restrict access to the shell for specific users withthese instructions.
How to block PowerShell access using Security Policy
Alternatively, you can achieve the same effect using the Local Security Policy console.
To prevent users from launching PowerShell settings up a Local Security Policy, use these steps:
After you complete the steps, users will no longer be able to launch the 32-bit or 64-bit version of PowerShell.
Disable access PowerShell ISE
Although the above steps can restrict access to the command-line tool, users can still get around this limitation using the PowerShell ISE interface. However, you can also disable access to this tool with the Local Security Policy app.
To disable access to PowerShell ISE, use these steps:
Once you complete the steps, the built-in version of PowerShell ISE will no longer be accessible.
If you want to revert the changes, you can use the same instructions outlined above, but onstep No. 4, right-click each hash rule you created, select theDeleteoption, and restart the computer.
How to block PowerShell 7 access uninstalling app
If the device also has PowerShell 7, you can restrict access by removing the app from Windows 10.
To uninstall PowerShell 7, use these steps:
After you complete the steps, no one will have access to PowerShell version 7 since it’s no longer installed on the device. Of course, you can always download and install the app again.
If you are trying to prevent users from making unwanted system changes, in addition to restricting access to PowerShell, you can alsodisable Command Prompt,Task Manager, andRegistry. Furthermore, you can even tryswitching the account type to “Standard User"to prevent users from making system changes and make the account more secure. However, users will still have access to PowerShell, Command Prompt, and Task Manager to perform some common tasks.
Mauro Huculak has been a Windows How-To Expert contributor for WindowsCentral.com for nearly a decade and has over 15 years of experience writing comprehensive guides. He also has an IT background and has achieved different professional certifications from Microsoft, Cisco, VMware, and CompTIA. He has been recognized as a Microsoft MVP for many years.
