Enable Powershell logging - missing GPO

Question

I want to enable script block logging for powershell. I have installed this new feature with a windows server 2016 VM. Now i want do test this with Windows server 2012 and Windows server 2008. First I installed PowerShell 5.0.

Now I want to aktivate logging with a Group Policy. But i can't find the Policy in: Group Policy Editor: Administrative Templates → Windows Components → Windows PowerShell → Turn On PowerShell Script Block Logging

How to add this policy? or How to enable script block logging?

score 3 · Accepted Answer · answered Dec 05 '16 at 10:14

3

Script Block Logging can be enabled via registry:

HKLM\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging

EnableScriptBlockLogging = 1

Not sure how to do this via GPO though.

answered Dec 05 '16 at 10:14

Strepsils

5,000
10
14

score 1 · Answer 2 · answered Dec 05 '16 at 12:11

According settings reference this parameter defined in powershellexecutionpolicy.admx group policy template.

You can:

Download and install group policy templates for Windows 10 on your workstation

or

Simple copy policy teplates from Windows 2016 VM c:\windows\PolicyDefinitions to domain policy definitions storage on SYSVOL\Policies\PolicyDefinitions folder (all domain computers search policy definition in this place)

or

Simple copy policy teplates from Windows 2016 VM c:\windows\PolicyDefinitions to same folder on your workstation

Enable Powershell logging - missing GPO

2 Answers2