To block PowerShell from all users (and only allow for a group of authorised users). We have put in place the Applocker group policy.
In the AppLocker gpo > Computer configuration > Policies > Windows Settings > Security Settings > Application Control Policies ? AppLocker:
I defined 'Allow' for one SG (E.g. SG A) to run %system32%\WindowsPowerShell\v1.0\powershell.exe
By doing so, have I deny all users, no matter which machine they running from (besides than the SG A) from using PowerShell?
thank you
Best Regards,