How do I change my default PowerShell profile / digitially sign my $profile file?

Question

I tried creating an ultimate setup for my powershell environment.

I created "Microsoft.PowerShell_profiles.ps1" with a bunch of statements to setup my default profile.

When I start a PowerShell session though, I get:

File C:\Documents and Settings\xxx\My Documents\WindowsPowerShell\Microsoft.PowerShell_profile.ps1 cannot be loaded. The file C:\Documents and Settings\xxx\My Documents\WindowsPowerShell\Microsoft.PowerShell_profile.ps1 is not digitally signed. The script will not execute on the system.

score 22 · Answer 1 · answered Jun 24 '09 at 19:13

By default Powershell restricts you from running "unsafe" scripts. Run the get-executionpolicy command to see what your system's level is at. To lower the restriction you can run Set-ExecutionPolicy and give it one of these as a parameter:

Restricted – No scripts can be run. Windows PowerShell can be used only in interactive mode.
AllSigned – Only scripts signed by a trusted publisher can be run.
RemoteSigned – Downloaded scripts must be signed by a trusted publisher before they can be run.
Unrestricted – No restrictions; all Windows PowerShell scripts can be run.

Also have a read of Scott Hanselman's words of wisdom on signing Powershell scripts.

+1 much better answer than the accepted one – Adriano Varoli Piazza Jul 30 '09 at 15:02 — Adriano Varoli Piazza, Jul 30 '09 at 15:02

score 14 · Accepted Answer · answered Jun 24 '09 at 19:11

14

The easiest solution is to

Set-ExecutionPolicy RemoteSigned

but that will run all scripts that are on the local disk (and are not in a Remote zone - like downloaded via IE)

answered Jun 24 '09 at 19:11

mihi

890
1
7
14

8

This is what I did, but I felt dirty afterwards. – Brett Veenstra Jun 24 '09 at 19:18

score 2 · Answer 3 · answered Jun 24 '09 at 19:12

You have 3 options here, you can either get your script signed by a trusted provider, or at least a provider you trust, or you can use the Set-ExecutionPolicy to set powershell to allow external scripts, either:

 Set-ExecutionPolicy RemoteSigned

Will run any script on the local machine, that has not come from the internet

Set-ExecutionPolicy  Unrestricted

Will allow any script to run, although if you downloaded it from the internet it will ask you to confirm you want to run it.

Finally, you can set the particular script to run by right-clicking the file, and click "Properties." At the bottom of the dialogue box click "Unblock."

How do I change my default PowerShell profile / digitially sign my $profile file?

3 Answers3

Linked