我在更改 Windows Server 2008+ 操作系统中的执行策略时遇到问题。这是我第一次尝试运行需要资源完全访问权限的脚本，在以提升模式启动 Powershell 后我尝试了以下操作:

Set-ExecutionPolicy Unrestricted

但是我明白了:

Set-ExecutionPolicy : Windows PowerShell updated your execution policy
successfully, but the setting is overridden by a policy defined at a more
specific scope.  Due to the override, your shell will retain its current
effective execution policy of RemoteSigned. Type "Get-ExecutionPolicy -List"
to view your execution policy settings. For more information please see
"Get-Help Set-ExecutionPolicy".
At line:1 char:1
+ Set-ExecutionPolicy Unrestricted
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : PermissionDenied: (:) [Set-ExecutionPolicy], SecurityException
    + FullyQualifiedErrorId : ExecutionPolicyOverride,Microsoft.PowerShell.Commands.SetExecutionPolicyCommand

虽然我是管理员，但我无法更改执行策略。该怎么办？

最佳答案

错误消息表明您尝试通过 Set-ExecutionPolicy 定义的设置已被另一个范围内的设置覆盖。使用 Get-ExecutionPolicy -List 查看哪个范围具有哪个设置。

PS C:\> <b>Get-ExecutionPolicy -List</b>

        Scope    ExecutionPolicy
        -----    ---------------
MachinePolicy          Undefined
   UserPolicy          Undefined
      Process          Undefined
  CurrentUser          Undefined
 LocalMachine       RemoteSigned

PS C:\> <b>Set-ExecutionPolicy Restricted -Scope Process -Force</b>
PS C:\> <b>Set-ExecutionPolicy Unrestricted -Scope CurrentUser -Force</b>
Set-ExecutionPolicy : <i>Windows PowerShell updated your execution policy
successfully, but the setting is overridden by a policy defined at a more
specific scope.  Due to the override, your shell will retain its current
effective execution policy of Restricted. Type "Get-ExecutionPolicy -List"
to view your execution policy settings. ...</i>
PS C:\> <b>Get-ExecutionPolicy -List</b>

        Scope    ExecutionPolicy
        -----    ---------------
MachinePolicy          Undefined
   UserPolicy          Undefined
      <i>Process         Restricted</i>
  <i>CurrentUser       Unrestricted</i>
 LocalMachine       RemoteSigned

PS C:\> <b>.\test.ps1</b>
.\test.ps1 : <i>File C:\test.ps1 cannot be loaded because running scripts is
disabled on this system. ...</i>
PS C:\> <b>Set-ExecutionPolicy Unestricted -Scope Process -Force</b>
PS C:\> <b>Set-ExecutionPolicy Restricted -Scope CurrentUser -Force</b>
Set-ExecutionPolicy : <i>Windows PowerShell updated your execution policy
successfully, but the setting is overridden by a policy defined at a more
specific scope.  Due to the override, your shell will retain its current
effective execution policy of Restricted. Type "Get-ExecutionPolicy -List"
to view your execution policy settings. ...</i>
PS C:\> <b>Get-ExecutionPolicy -List</b>

        Scope    ExecutionPolicy
        -----    ---------------
MachinePolicy          Undefined
   UserPolicy          Undefined
      <i>Process       Unrestricted</i>
  <i>CurrentUser         Restricted</i>
 LocalMachine       RemoteSigned

PS C:\> <b>.\test.ps1</b>
<i>Hello World!</i>

如您所见，尽管有错误，这两个设置都已定义，但更具体范围 (Process) 中的设置仍然优先，阻止或允许脚本执行。

由于默认范围是 LocalMachine，错误可能是由 CurrentUser 或 Process 范围中的设置引起的。但是，更常见的原因是脚本执行是通过组策略(本地或域)配置的。

本地组策略可以由本地管理员通过 gpedit.msc(本地组策略编辑器)修改，如 this answer 中所述。 .

域组策略不能被本地设置/策略取代，必须由域管理员通过域 Controller 上的 gpmc.msc(组策略管理)进行更改。

对于本地和域策略，设置可以定义为计算机设置:

Computer Configuration
`-Administrative Templates
  `-Windows Components
    `-Windows PowerShell -> Turn on Script Execution

或作为用户设置:

User Configuration
`-Administrative Templates
  `-Windows Components
    `-Windows PowerShell -> Turn on Script Execution

前者适用于计算机对象，后者适用于用户对象。对于本地策略，用户策略和计算机策略之间没有显着差异，因为用户策略会自动应用于计算机上的所有用户。

策略可以具有以下三种状态之一(如果您分别计算可用于状态启用的 3 种设置，则为五种状态):

• 未配置:策略不控制 PowerShell 脚本的执行。
• 已启用:允许执行 PowerShell 脚本。
  • Allow only signed scripts:仅允许执行已签名的脚本(与 Set-ExecutionPolicy AllSigned 相同)。
  • 允许本地脚本和远程签名脚本:允许执行所有本地脚本(签名或未签名)和远程位置的签名脚本(与 Set-ExecutionPolicy RemoteSigned 相同).
  • 允许所有脚本:允许执行本地和远程脚本，无论它们是否已签名(与 Set-ExecutionPolicy Unrestricted 相同)。
• 已禁用:禁止执行 PowerShell 脚本(与 Set-ExecutionPolicy Restricted 相同)。

通过 Set-ExecutionPolicy 所做的更改仅在本地和域策略设置为未配置时生效(范围内的执行策略未定义 MachinePolicy 和 UserPolicy)。

关于windows - 如何成功更改执行策略并启用 PowerShell 脚本的执行，我们在Stack Overflow上找到一个类似的问题： https://stackoverflow.com/questions/27753917/