ADMX Viewer
Microsoft.Policies.PowerShell• Both

Turn on Script Execution

This policy setting lets you configure the script execution policy, controlling which scripts are allowed to run. If you enable this policy setting, the scripts selected in the drop-down list are allowed to run. The "Allow only signed scripts" policy setting allows scripts to execute only if they are signed by a trusted publisher. The "Allow local scripts and remote signed scripts" policy setting allows any local scrips to run; scripts that originate from the Internet must be signed by a trusted publisher. The "Allow all scripts" policy setting allows all scripts to run. If you disable this policy setting, no scripts are allowed to run. Note: This policy setting exists under both "Computer Configuration" and "User Configuration" in the Local Group Policy Editor. The "Computer Configuration" has precedence over "User Configuration." If you disable or do not configure this policy setting, it reverts to a per-machine preference setting; the default if that is not configured is "No scripts allowed."

Policy Details

Policy Name
EnableScripts
Registry Key
Software\Policies\Microsoft\Windows\PowerShell
Value Name
EnableScripts
Supported On
At least Microsoft Windows 7 or Windows Server 2008 family
OMA-URI (CSP)
ADMX_PowerShellExecutionPolicy/EnableScripts
OS Build Version:10.0.22000, 10.0.19043.1202, 10.0.19042.1202, 10.0.19041.1202
CSP Version:10.0
Conflict Resolution:LastWrite
Allowed Editions:
EnterpriseEnterprise NProfessionalProfessional NEnterprise EvaluationEnterprise N EvaluationEducationEducation NEnterprise SEnterprise S NEnterprise S EvaluationEnterprise S N EvaluationHolographic BusinessPro Single LanguagePro ChinaPro WorkstationPro Workstation NPro For EducationPro For Education NEnterprisegEnterprisegnServerrdshIotenterpriseIotenterprisesCloudeditionnCloudeditionIotenterpriseskIotenterpriseseval
Policy State Values
Enabled: 1
Disabled: 0
Available Languages
en-us

Configuration Elements

Execution Policy

Type: enum

Allowed Values
  • AllSigned Allow only signed scripts
  • RemoteSigned Allow local scripts and remote signed scripts
  • Unrestricted Allow all scripts