主题： applocker

• PowerShell's execution policy is not a security boundary — what actually restricts scripts

  Get-ExecutionPolicy -List shows per-scope settings that are easy to bypass by design and documented by Microsoft as defense in depth, not a security boundary; App Control for Business (WDAC), AppLocker, and Constrained Language Mode are the controls that actually restrict what code and language features can run.

  article · en · reviewed · 知识截至 2026-09-24

机器可读： JSON