Set-ExecutionPolicy Unrestricted
但是我得到这个：
Set-ExecutionPolicy : Windows PowerShell updated your execution policy successfully,but the setting is overridden by
a policy defined at a more specific scope. Due to the override,your shell will retain its current effective
execution policy of RemoteSigned. Type "Get-ExecutionPolicy -List" to view your execution policy settings. For more
information please see "Get-Help Set-ExecutionPolicy".
At line:1 char:1
+ Set-ExecutionPolicy Unrestricted
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : PermissionDenied: (:) [Set-ExecutionPolicy],SecurityException
+ FullyQualifiedErrorId : ExecutionPolicyOverride,Microsoft.PowerShell.Commands.SetExecutionPolicyCommand
虽然我是管理员,但我无法更改执行策略.该怎么办？
PS C:\> Get-ExecutionPolicy -List
Scope ExecutionPolicy
----- ---------------
MachinePolicy Undefined
UserPolicy Undefined
Process Undefined
CurrentUser Undefined
LocalMachine RemoteSigned
PS C:\> Set-ExecutionPolicy Restricted -Scope Process -Force
PS C:\> Set-ExecutionPolicy Unrestricted -Scope CurrentUser -Force
Set-ExecutionPolicy : @H_301_20@Windows PowerShell updated your execution policy successfully,but the setting is overridden by a policy defined at a more specific scope. Due to the override,your shell will retain its current effective execution policy of Restricted. Type "Get-ExecutionPolicy -List" to view your execution policy settings. ...
PS C:\> Get-ExecutionPolicy -List
Scope ExecutionPolicy
----- ---------------
MachinePolicy Undefined
UserPolicy Undefined
@H_301_20@Process Restricted
@H_301_20@CurrentUser Unrestricted
LocalMachine RemoteSigned
PS C:\> .\test.ps1
.\test.ps1 : @H_301_20@File C:\test.ps1 cannot be loaded because running scripts is disabled on this system. ...
PS C:\> Set-ExecutionPolicy Unestricted -Scope Process -Force
PS C:\> Set-ExecutionPolicy Restricted -Scope CurrentUser -Force
Set-ExecutionPolicy : @H_301_20@Windows PowerShell updated your execution policy successfully,your shell will retain its current effective execution policy of Restricted. Type "Get-ExecutionPolicy -List" to view your execution policy settings. ...
PS C:\> Get-ExecutionPolicy -List
Scope ExecutionPolicy
----- ---------------
MachinePolicy Undefined
UserPolicy Undefined
@H_301_20@Process Unrestricted
@H_301_20@CurrentUser Restricted
LocalMachine RemoteSigned
PS C:\> .\test.ps1
@H_301_20@Hello World!
您可以看到,尽管发生了错误,但两个设置都已定义,但是更具体的范围(Process)中的设置仍然优先于预防或允许脚本执行.
由于默认范围是LocalMachine,所以可能由CurrentUser或Process范围中的设置引起错误.但是,更常见的原因是脚本执行是通过组策略(本地或域)配置的.
本地组策略可以由本地管理员通过gpedit.msc(本地组策略编辑器)进行修改,如this answer所述.
域组策略不能被本地设置/策略所取代,并且必须由域管理员通过域控制器上的gpmc.msc(组策略管理)进行更改.
对于本地和域策略,设置可以定义为计算机设置：
Computer Configuration
`-Administrative Templates
`-Windows Components
`-Windows PowerShell -> Turn on Script Execution
或作为用户设置：
User Configuration
`-Administrative Templates
`-Windows Components
`-Windows PowerShell -> Turn on Script Execution
前者适用于计算机对象,后者适用于用户对象.对于本地政策,用户和计算机策略之间没有显着差异,因为用户策略自动应用于计算机上的所有用户.
一个策略可以有三种状态之一(如果您将“3”设置计数为可分别启用的状态,则可以有五种状态)：
>未配置：策略不会控制PowerShell脚本执行.
> Enabled：允许PowerShell脚本执行.
>仅允许签名脚本：仅允许执行签名脚本(与Set-ExecutionPolicy AllSigned相同).
>允许本地脚本和远程签名脚本：允许从远程位置(与Set-ExecutionPolicy RemoteSigned相同)执行所有本地脚本(已签名或未签名)和已签名脚本.
>允许所有脚本：允许执行本地和远程脚本,而不管它们是否被签名(与Set-ExecutionPolicy Unrestricted相同).
>禁用：禁止PowerShell脚本执行(与Set-ExecutionPolicy Restricted相同).
通过Set-ExecutionPolicy进行的更改仅在本地和域策略设置为未配置(执行策略未定义在Scope MachinePolicy和UserPolicy)中生效.
