BaselineWatch
Apply as published
Desk

Windows WN11-00-000155

DISA STIG WN11-00-000155 (CAT II): The Windows PowerShell 2.0 feature must be disabled on the system.

DISA STIG recommends

WN11-00-000155 CAT II

The Windows PowerShell 2.0 feature must be disabled on the system.

NIST SP 800-53: CM-7

Check

For Windows 11 version 24H2 and newer, this requirement is Not Applicable. Run "Windows PowerShell" with elevated privileges (run as administrator). Enter the following: Get-WindowsOptionalFeature -Online | Where FeatureName -like *PowerShellv2* If either of the following have a "State" of "Enabled", this is a finding. FeatureName : MicrosoftWindowsPowerShellV2 State : Enabled FeatureName : MicrosoftWindowsPowerShellV2Root State : Enabled Alternately: Search for "Features". Select "Turn Windows features on or off". If "Windows PowerShell 2.0" (whether the subcategory of "Windows PowerShell 2.0 Engine" is selected or not) is selected, this is a finding.

Fix

Disable "Windows PowerShell 2.0" on the system. Run "Windows PowerShell" with elevated privileges (run as administrator). Enter the following: Disable-WindowsOptionalFeature -Online -FeatureName MicrosoftWindowsPowerShellV2Root This command must disable both "MicrosoftWindowsPowerShellV2Root" and "MicrosoftWindowsPowerShellV2", which correspond to "Windows PowerShell 2.0" and "Windows PowerShell 2.0 Engine" respectively in "Turn Windows features on or off". Alternately: Search for "Features". Select "Turn Windows features on or off". De-select "Windows PowerShell 2.0".

Our decision

Apply as published

No decision recorded: the recommendation stands. The owner signs in to change it.

All Windows decisions · The Windows baseline · The Windows test plan