Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 816884" data-attributes="member: 32260">Normally it is not run as admin, but [USER=11229]@Freki123[/USER] have run it as admin to see the log from Advanced SRP logging feature (see TOOLS). <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite130" alt="(y)" title="Thumbs up&nbsp; &nbsp; (y)" loading="lazy" data-shortname="(y)" />This is probably not necessary, because he could just use &lt;Blocked Events / Security Logs&gt; to see the same blocked events.The script is created by Windows to manage PowerShell Language modes, but I do not know how it is related to the game from [USER=11229]@Freki123[/USER] post.<s>The whitelisted entries in the user Temp folder should be maximally specific (not general). The best way would be whitelisting the script by hash, but @Freki cannot probably see it because it is quickly deleted.</s>This script should be blocked!!! See the next post.[USER=11229]@Freki123[/USER],Why do you want to whitelist this PowerShell script? Do you have any problem with the game when the script is blocked? What Windows edition do you use (Home, Pro, E3, E5)?It seems that this script is a part of PowerShell validating mechanism to find out if SRP or Applocker are activated. When it is blocked, PowerShell turns on Constrained Language mode which is welcome. This script should be blocked, so it should not be whitelisted. If you whitelist this script the test will be fooled and PowerShell will turn off Constrained Language mode (Full Language will be applied).</blockquote>

[QUOTE="Andy Ful, post: 816884, member: 32260"] Normally it is not run as admin, but [USER=11229]@Freki123[/USER] have run it as admin to see the log from Advanced SRP logging feature (see TOOLS). (y) This is probably not necessary, because he could just use <Blocked Events / Security Logs> to see the same blocked events. The script is created by Windows to manage PowerShell Language modes, but I do not know how it is related to the game from [USER=11229]@Freki123[/USER] post. [S]The whitelisted entries in the user Temp folder should be maximally specific (not general). [COLOR=rgb(184, 49, 47)]The best way would be whitelisting the script by hash[/COLOR], but @Freki cannot probably see it because it is quickly deleted.[/S] This script should be blocked!!! See the next post. [USER=11229]@Freki123[/USER], [COLOR=rgb(184, 49, 47)][B]Why do you want to whitelist this PowerShell script?[/B][/COLOR] Do you have any problem with the game when the script is blocked? What Windows edition do you use (Home, Pro, E3, E5)? It seems that this script is a part of PowerShell validating mechanism to find out if SRP or Applocker are activated. When it is blocked, PowerShell turns on Constrained Language mode which is welcome. This script should be blocked, so it should not be whitelisted. If you whitelist this script the test will be fooled and PowerShell will turn off Constrained Language mode (Full Language will be applied). [/QUOTE]

Verification