Advice Request Powershell constrained language on Windows 7?

[shmu26]

On Windows 7 Ultimate x64, I ran the following from elevated Powershell prompt:

[Environment]::SetEnvironmentVariable('__PSLockdownPolicy', '4', 'Machine')

Then I closed the prompt, and reopened it, and ran

$ExecutionContext.SessionState.LanguageMode

But it said "FullLanguage".

Then I went into Control Panel, and in advanced security settings, I looked at the environment variables, and one of them is: "PSLockdownPolicy 4".

So... is it enabled, or is it not?

 

[shmu26]

@Andy Ful have you experimented with Constrained Language on Windows 7?

 

[Andy Ful]

@Andy Ful have you experimented with Constrained Language on Windows 7?

Yes. It works with PowerShell 3.0+, see my post:
https://malwaretips.com/threads/how-do-you-secure-powershell.70981/post-623698