Not stopping at ANY breakpoints Win10 (1809) PowerShell v 5.1

This forum can be browsed by the general public. Posting is limited to current SAPIEN license holders with active maintenance and does not offer a response time guarantee.
Forum rules
DO NOT POST SUBSCRIPTION NUMBERS, LICENSE KEYS OR ANY OTHER LICENSING INFORMATION IN THIS FORUM.
Only the original author and our tech personnel can reply to a topic that is created in this forum. If you find a topic that relates to an issue you are having, please create a new topic and reference the other in your post.

Any code longer than three lines should be added as code using the 'Select Code' dropdown menu or attached as a file.
User avatar
FrankAndrew
Posts: 128
Joined: Thu Oct 26, 2006 7:00 pm

Re: Not stopping at ANY breakpoints Win10 (1809) PowerShell v 5.1

Post by FrankAndrew » Sun Jul 07, 2019 10:45 pm

Hi Alex,

Here are the details from our Client Admins how they have configured the Group Policies so that the ConstrainedLangauge Mode is enforced: (Und eben wieder nicht)

Hi,

hier die Beschreibung unserer Applocker-Umgebung.

Wir setzen über eine GPO das Module Applocker Scriptregeln ein. Dadurch werden Scripte im CLM-Mode (Constrained Language Mode) ausgeführt.

AppLocker Gruppenrichtlinien
AppLocker Gruppenrichtlinien
2019.07.05_AppLocker_GruppenRichtLinienVerwaltung.png (71.67 KiB) Viewed 963 times

Um Powershell Entwicklern die Möglichkeit zu bieten als normaler User im FLM-Mode (Full Language Mode) zu arbeiten. Haben wir eine eigene AD-Gruppe dafür angelegt.
Und dieser AD-Gruppe über die GPO-Delegierung das „Gruppenrichtlinie übernehmen“ verweigert.

AD-Gruppe
AD-Gruppe
2019.07.05_AD-Gruppe_GPO-WIN10-Apps-Applocker-Script.png (42.22 KiB) Viewed 963 times

hier noch die Übersicht welche Sachen im CLM nicht möglich sind.

https://devblogs.microsoft.com/powershe ... uage-mode/

Viele Grüße,
Carsten

I hope this helps you guys to be able to reproduce a ConstrainedLanguage Mode environment so that you can improve the way PSS deals with it.

If you have any more questions about what needs to be done to get this to work let me know and I will get you in contact with Carsten. :)