PowerShell security features
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/PowerShell-Docs · commit 697af3c · +13 −0 lines · also on GitHub
⋯ 76 unchanged lines
7777
For more information about how PowerShell supports AppLocker and App Control, see
7878
[Use App Control to secure PowerShell][10].
7979
80
+### System Lockdown mode
81
+
82
+In PowerShell, System Lockdown mode is an abstraction of the system-wide application control policy
83
+enforced by Windows through App Control for Business or AppLocker. When an application control
84
+policy is active, PowerShell enters System Lockdown mode. In System Lockdown mode, the application
85
+control policy determines the language mode for each runspace.
86
+
87
+> [!IMPORTANT]
88
+> Without System Lockdown mode, language mode doesn't propagate between runspaces. Each runspace
89
+> independently queries the Windows application control policy to determine its language mode.
90
+> Setting the language mode on one runspace doesn't affect other runspaces. Without an active
91
+> application control policy, new runspaces default to `FullLanguage` mode.
92
+
8093
## Software Bill of Materials (SBOM)
8194
8295
Beginning with PowerShell 7.2, all install packages contain a Software Bill of Materials (SBOM). The
⋯ 80 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/PowerShell-Docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 02:15 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.