In version 5, PowerShell now reduces its functionality to “Constrained Mode” for both interactive input and user-authored scripts when it detects that PowerShell scripts have an ‘Allow Mode’ policy applied to them.
Scripts that are allowed by the AppLocker policy (for example: signed by the enterprise’s trusted code signing certificate, or in a trusted directory) are not subject to Constrained Language. They have access to the extended capabilities of the PowerShell
language disallowed by Constrained Language. This includes unverifiable extensions such as .NET scripting, and invocation of Win32 APIs.
Source:
https://blogs.msdn.microsoft.com/powershell/2015/06/09/powershell-the-blue-team/
We have identical AppLocker rules, both W7 and W10, in use. Defined AppLocker rules (White List) do not work in W7! In W10 with PowerShell 5, everithing works like described.
Is this a BUG in WMF 5.0 for W7?
Martin Schneeberger
