Securely Implementing Execution Policies in Windows PowerShell

iPowerShell, by default, lets you run commands (cmdlets) via its console. To execute a script, you can create a notepad file with the script code, save it with a .ps1 file extension, and execute it via the PowerShell console. You can also directly paste the script onto the console for execution.

However, if it’s your first time executing a script via PowerShell, you’ll encounter the “running script is disabled” error. By default, script execution on PowerShell is disabled as a security measure to prevent malicious scripts from running on your system. Here we show you the two ways to enable the scrip execution policy on Windows PowerShell.

How to Check Your Existing Execution Policy

You can use a PowerShell cmdlet to get your current execution policy. Knowing your current execution policy is necessary to know if you need a policy change or not.

To get your current execution policy for the current user:

1. Open Windows PowerShell as administrator .
2. Type the following command in the PowerShell console and hit Enter:
   get-executionpolicy
3. Since you have encountered an error when executing the script, the return will likely showRestricted as your current execution policy.
4. If you need to view the execution policy for all the supported scopes:
   get-executionpolicy -list

You’ll need to change the execution policy to RemoteSigned to run local scripts without the error. You can change the execution policy from the Settings app and PowerShell.

How to Enable PowerShell Execution Policy Using the Settings App

You can change and set the PowerShell execution policy to RemoteSigned using the Settings app. All you have to do is tweak the PowerShell settings in the developers’ section to change the execution policy to enable PowerShell script execution.

To change execution policy using Settings:

1. PressWin + I to open Set tings.
2. Open thePrivacy & Security tab in the left pane.
3. Next, click onFor developers.
   
4. Click to expand thePowerShell section.

5. Toggle the switch to change the execution policy to allow local PowerShell scripts to run without signing - Require signing for remote scripts .
   
6. Once done, open PowerShell, type getexecutionpolicy, and pressEnter . The execution policy for the current user is now set toRemoteSigned.

7. If you need to disable the execution policy, toggle the PowerShell switch and set it toOff .

How to Allow Scripts to Run in PowerShell using PowerShell

You can use aPowerShell cmdlet to set the execution policy to RemoteSigned. The command-line interface makes it easy to change execution policy quickly without using the Settings app.

Also, the Settings app can only enable or disable the RemoteSigned execution policy. Whereas PowerShell lets you set other policies and scopes as well.

To change the execution policy using PowerShell:

1. Open PowerShell as administrator .
2. In the PowerShell window, type the following command and pressEnter :
   Set-ExecutionPolicy RemoteSigned
3. If prompted, pressA to confirm the action. This will set theRemoteSigned execution policy for all users. If you want to set the execution policy for theCurrent User only, use the Scope parameter followed by the username.
4. For example, to set theRemoteSigned execution policy forCurrentUser , use the following command:
   Set-ExecutionPolicy RemoteSgined -Scope CurrentUser
5. ReplaceCurrentUser in the above command with other users (Scope) as per your requirement.

How to Remove Script Execution Policy Using PowerShell

If you want to disable script execution, set the execution policy toUndefined using the Set_ExecutionPolicy cmdlet. This is a default state and prevents PowerShell from executing any scripts.

To disable script execution using PowerShell:

1. Open PowerShell with elevated permission.
2. Next, type the following command and press enter to disable script execution for all users:
   Set-ExecutionPolicy undefined
3. The above command will set the execution policy default (undefined) for all the users. If you want to disable script execution for a specific scope, use the following command:
   Set-ExecutionPolicy undefined -Scope CurrentUser
4. The above command will disable script execution forCurrentUser .

Understanding Execution Policies and Scopes

Simply put, PowerShell’s execution policy is a policy that controls how PowerShell executes config files and scripts. The intended purpose is to prevent users from accidentally running malicious scripts. The seven PowerShell execution policies are Default, Restricted, RemoteSigned, AllSigned, Unrestricted, Bypass, and Undefined .

The below table briefly explains all the PowerShell execution policies:

Execution Policy Scope

You can set execution policy for a particular scope in PowerShell. The five execution policy scopes areMachinePolicy, UserPolicy, Process, CurrentUser, andLocalMachine .

The below table briefly explains all the execution policy scopes:

Add or Remove PowerShell Script Execution Policy on Windows

Script execution on PowerShell is disabled by default for Windows clients and set to RemoteSigned for Windows server. Power users, however, can change execution policies to run local, signed, and unsigned PowerShell scripts.

Alternatively, you can bypass the PowerShell execution policy by pasting the script into a PowerShell console or ECHO your script into PowerShell standard input. This is useful if you want to execute scripts without changing the execution policy.

Also read: