Turn on Script Execution

This policy setting lets you configure the script execution policy, controlling which scripts are allowed to run.

If you enable this policy setting, the scripts selected in the drop-down list are allowed to run.

The “Allow only signed scripts” policy setting allows scripts to execute only if they are signed by a trusted publisher.

The “Allow local scripts and remote signed scripts” policy setting allows any local scrips to run; scripts that originate from the Internet must be signed by a trusted publisher.

The “Allow all scripts” policy setting allows all scripts to run.

If you disable this policy setting, no scripts are allowed to run.

Note: This policy setting exists under both “Computer Configuration” and “User Configuration” in the Local Group Policy Editor. The “Computer Configuration” has precedence over “User Configuration.”

If you disable or do not configure this policy setting, it reverts to a per-machine preference setting; the default if that is not configured is “No scripts allowed.”

Supported on: At least Microsoft Windows 7 or Windows Server 2008 family

Registry Hive	HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
Registry Path	Software\Policies\Microsoft\Windows\PowerShell
Value Name	EnableScripts
Value Type	REG_DWORD
Enabled Value	1
Disabled Value	0

Execution Policy

Allow only signed scripts

Registry Hive	HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
Registry Path	Software\Policies\Microsoft\Windows\PowerShell
Value Name	ExecutionPolicy
Value Type	REG_SZ
Value	AllSigned

Allow local scripts and remote signed scripts

Registry Hive	HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
Registry Path	Software\Policies\Microsoft\Windows\PowerShell
Value Name	ExecutionPolicy
Value Type	REG_SZ
Value	RemoteSigned

Allow all scripts

Registry Hive	HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
Registry Path	Software\Policies\Microsoft\Windows\PowerShell
Value Name	ExecutionPolicy
Value Type	REG_SZ
Value	Unrestricted