Share via

SCCM Powershell execution policy

  • Article

Question

Wednesday, February 15, 2017 8:35 AM

Hi!

Our security officers very concern about changing default powershell policy on PCs.

I wish to have confirmation on next statements:

1) Powershell client settings policy affect only SCCM powershell detection and application scripts and not affect default powershell execution policy.

2) Restricted(or any other) execution policy set by GPO will not affect SCCM powershell detection and application scripts that have bypass policy in client settings.

All replies (1)

Wednesday, February 15, 2017 10:29 AM

Please review below thread:

https://social.technet.microsoft.com/Forums/en-US/d5f1789e-eb1a-45a8-b220-a2d2f77ddc3c/client-setting-powershell-execution-policy-bypass?forum=configmanagerapps

If I'm not mistaken, this hasn't been changed yet. Settings in CM Client setting will not affect default PowerShell execution policy on windows. If you want to execute a PowerShell script using like application, you still need to add parameter 

"-ExecutionPolicy Bypass". 

GPO will not affect Configuration Manager either.

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].