how to set Set-ExecutionPolicy RemoteSignet to default? (after running script to see Meltdown and Sceptre status)

Question

_{Saturday, January 13, 2018 10:05 AM}

Hi

I run this script in Admin power shell

Install-Module SpeculationControl

(run command in PS, when asked about installing missing components choose Y)

Set-ExecutionPolicy RemoteSigned

(run command in PS)

Import-Module SpeculationControl

(run command in PS)

Get-SpeculationControlSettings

(run command in PS, results should be finally visible)

I confirmed with A to  Set-ExecutionPolicy RemoteSigned

now I want to change it to default

I run

Set-ExecutionPolicy Restricted and chose A (yes for all)

did I did it right?

I ask because I can still run Get-SpeculationControlSettings and get result athough I set It to restricted, which should be default. Before I set it to RemoteSigned get speculation control settings did not work.

I have run this so I can check sceptre and meltdown status.

Thanks!

Update 

I set it to Set-ExecutionPolicy default and pressed A (yes for all)

I asked in Microsoft answers forum and was instructed to ask here

https://answers.microsoft.com/en-us/windows/forum/windows_10-security/how-to-set-set-executionpolicy-remotesignet-to/e72bebcf-08bb-4a1d-92c0-8853ae3fe41f

All replies (2)

_{Saturday, January 13, 2018 4:04 PM}

The Execution polices as installed are all undefined (setting to Default does set LocalMachine to Restricted so that appears different to me than at install time).

However not sure why you can run Get-SpeculationControlSettings as with either Undefined or Restricted it should not run (does not for me even though installed). What does;

Get-ExecutionPolicy -List

Show?

_{Saturday, January 13, 2018 9:41 PM}

Hi!

Is is listed as:

MachinePolicy Undefined

UserPolicy Undefined

Process Undefined

CurrentUser Undefined

LocalMachine Restricted

and now Get SpeculatioControlSettings gives command was not found in module. I don't know why was I getting it before.

I guess it is all allright now. All on undefined is default behaviour then, except for LocalMachine that I set to Resticted.

I don't know why I was getting it before.

Thank you kindly for your answer!

Best regards!