Tag: Windows

When trying to run a PowerShell script, an error message pops up that tells you that you’re not allowed to run PowerShell scripts.

File C:\scripts\test.ps1 cannot be loaded because the execution of scripts is disabled on this system. Please see "get-
help about_signing" for more details.

The security settings built into Windows PowerShell include something called the “execution policy;” the execution policy determines how (or if) PowerShell runs scripts. By default, PowerShell’s execution policy is set to Restricted; that means that scripts – including those you write yourself – won’t run. Period.

You can verify the settings for your execution policy by typing the following at the PowerShell command prompt and then pressing ENTER:

Get-ExecutionPolicy

Now, admittedly, this might seem a bit severe. After all, what’s the point of having a scripting environment if you can’t even run scripts with it? But that’s OK. If you don’t like the default execution policy (and you probably won’t) then just go ahead and change it. For example, suppose you want to configure PowerShell to run – without question – any scripts that you write yourself, but to run scripts downloaded from the Internet only if those scripts have been signed by a trusted publisher. In that case, use this command to set your execution policy to RemoteSigned:

Set-ExecutionPolicy RemoteSigned

This is a one time operation one has to perform on every server that PowerShell scripts will be running on.

Greetz, M.

Internet Explorer Enhanced Security Configuration places your server and Microsoft Internet Explorer in a configuration that decreases the exposure of your server to potential attacks that can occur through Web content and application scripts. As a result, some Web sites may not display or perform as expected.In my personal openion opera webbrowser is more safer than IE/firefox.

If you only need to access the web every now and then from a server or if you are working on a test server, then you can disable Internet Explorer Enhanced Security Configuration.

For Windows Server 2003 Users

I didn’t find a way to turn it off in the IE configuration and It seems one has to uninstall it: Go to Control Panel, then Add or Remove Programs, then click on Add/Remove Windows Components uncheck the Internet Explorer Enhanced Security Configuration and click on next.

For Windows Server 2008 Users

In Windows Server 2003, one has to uninstall the corresponding Windows Component. In Windows Server 2008, this doesn’t work anymore. You have to click on the root folder in Server Manager. Then you scroll down to the Security Information Section and click “Configure IE ESC”. You can turn off IE ESC for Administrators and/or for users. The latter probably only makes sense in a Terminal Server environment.

That’s all folks !

Greetz, M.

Ran into a license issue when configuring RD session host on SBS2011 and using user CAL’s.

The license manager kept complaining about the lack of appropriate licenses. The user CAL licenses were added, but for some reason the license type could be set tot “user”, but after a refresh showed “administrative remote desktop” again.

Finally figured out how to solve this :
By applying the Set the Remote Desktop licensing mode Group Policy setting.

This Group Policy setting is located in Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Licensing and can be configured by using either Local Group Policy Editor or the Group Policy Management Console (GPMC). Note that the Group Policy setting will take precedence over the setting configured in Remote Desktop Session Host Configuration.

Read the full article on the Microsoft Technet site.

greetz, M.