How to disable PowerShell on Windows 10

On Windows x, PowerShell is a powerful cross-platform tool that allows yous to run scripts and commands to change system settings, manage features, troubleshoot bug, and automate tasks.

Although it is a useful command-line shell, in some situations, y'all may need to disable it to brand sure that users do non make unwanted changes or execute scripts with malicious commands. And other times, you may need to restrict access to PowerShell to comply with the company's policies.

Whatever the reason information technology might be, Windows 10 offers multiple means to disable admission to the built-in version of PowerShell or the standalone version of the tool, PowerShell 7.

In this Windows 10 guide, nosotros will walk you through three different ways to disable access to PowerShell, including PowerShell vii.

How to cake PowerShell access using Group Policy
How to block PowerShell access using Security Policy
How to block PowerShell 7 admission uninstalling app

How to block PowerShell access using Group Policy

If you lot use Windows 10 Pro (or Enterprise), the easiest mode to disable access to PowerShell is using the Local Group Policy Editor.

To disable PowerShell on Windows x, apply these steps:

Open Offset.
Search forgpedit.msc and select the top result to open the Local Grouping Policy Editor.
Browse the following path:

User Configuration > Administrative Templates > System
On the right side, double-click the Don't run specified Windows applications policy.

Source: Windows Central
Select the Enabled option.
Nether the "Choice"due south section, click the Show button.

Source: Windows Central
In the "Value" column, type powershell.exe to disable the PowerShell experience.

Source: Windows Cardinal
(Optional) In the "Value" column, type powershell_ise.exe in a new cell to disable the PowerShell ISE interface.
(Optional) In the "Value" column, type pwsh.exe in a new cell to disable PowerShell 7.
Click the Use. button
Click the OK button.

Once y'all consummate the steps, users volition no longer be able to launch and use PowerShell.

In the case you lot change your mind, you can curlicue back the previous settings using the same instructions, only on footstep No. 5, select the Non Configured option.

We are focusing this guide on disabling PowerShell for all users, merely you tin also restrict admission to the shell for specific users with these instructions.

How to block PowerShell access using Security Policy

Alternatively, you tin can accomplish the same outcome using the Local Security Policy console.

To prevent users from launching PowerShell settings up a Local Security Policy, employ these steps:

Open Start.
Search for Local Grouping Policy and click the summit result to open up the app.
Double-click to expand the Software Restriction Policies branch.
Right-click the "Additional Rules" category, and select the New Hash Dominion choice.

Source: Windows Central

Quick tip: If the category is not bachelor, right-click the Software Brake Policies co-operative and select the New Software Restriction Policies option.
Click the Browse button.

Source: Windows Central
Copy and paste the following path in the address bar to locate the 32-bit version of PowerShell and press Enter:

%SystemRoot%\system32\WindowsPowerShell\v1.0
Select the powershell.exe executable.

Source: Windows Central
Click the Open button.
Click the Apply button.
Click the OK button.
Right-click the "Boosted Rules" category and select the New Hash Rule option.
Click the Browse button.
Copy and paste the following path in the address bar to locate the 64-flake version of PowerShell and press Enter:

%SystemRoot%\SysWOW64\WindowsPowerShell\v1.0

Quick tip: If you desire to disable access to PowerShell version 7, then you lot can create another hash rule with this path: "%SystemRoot%\Program Files\PowerShell\7\pwsh.exe. Or uninstall the app with the steps beneath.
Select the powershell.exe executable.

Source: Windows Cardinal
Click the Open button.
Click the Apply button.
Click the OK button.
Restart the reckoner.

After you complete the steps, users will no longer exist able to launch the 32-scrap or 64-flake version of PowerShell.

Disable access PowerShell ISE

Although the above steps can restrict access to the command-line tool, users tin can still go effectually this limitation using the PowerShell ISE interface. However, you tin besides disable access to this tool with the Local Security Policy app.

To disable access to PowerShell ISE, utilize these steps:

Open Beginning.
Search for Local Group Policy and click the top result to open up the app.
Double-click to aggrandize the Software Restriction Policies branch.
Right-click the "Boosted Rules" category, and select the New Hash Rule pick.

Source: Windows Central
Click the Browse button.

Source: Windows Key
Re-create and paste the following path in the address bar to locate the 32-bit version of PowerShell ISE and press Enter:

%SystemRoot%\system32\WindowsPowerShell\v1.0
Select the powershell_ise.exe executable.

Source: Windows Key
Click the Open up button.
Click the Apply push.
Click the OK button.
Correct-click the "Additional Rules" category and select the New Hash Dominion option.
Click the Browse button.
Copy and paste the post-obit path in the accost bar to locate the 64-fleck version of PowerShell and press Enter:

%SystemRoot%\SysWOW64\WindowsPowerShell\v1.0
Select the powershell_ise.exe executable.

Source: Windows Primal
Click the Open push button.
Click the Apply button.
Click the OK push.
Restart the computer.

One time you complete the steps, the built-in version of PowerShell ISE will no longer be attainable.

If you desire to revert the changes, you tin employ the aforementioned instructions outlined above, simply on step No. 4, correct-click each hash dominion yous created, select the Delete choice, and restart the calculator.

How to block PowerShell 7 access uninstalling app

If the device also has PowerShell 7, you lot can restrict access by removing the app from Windows ten.

To uninstall PowerShell seven, use these steps:

Open Settings.
Click on Apps.
Click on Apps & features.
Nether the "Apps & features" department, select the PowerShell app.
Click the Uninstall push button.

Source: Windows Central
Click the Uninstall button again.
Go along with the on-screen directions (if applicable).

After you complete the steps, no one volition have access to PowerShell version vii since it's no longer installed on the device. Of course, you tin always download and install the app over again.

If you are trying to prevent users from making unwanted arrangement changes, in improver to restricting access to PowerShell, yous can besides disable Command Prompt, Chore Manager, and Registry. Furthermore, you can fifty-fifty endeavour switching the account type to "Standard User" to prevent users from making organization changes and make the business relationship more than secure. Yet, users volition still take access to PowerShell, Control Prompt, and Task Manager to perform some common tasks.