How to deploy HKCU registry changes while blocking powershell.

Microsoft just released an update to Intune. The old GPO’s structure is back. But it is still missing settings… Sometimes you really want to push a simple hkey_current_user setting. Normally that is not a problem when you are NOT blocking PowerShell 🙂 . But my opinion.. not blocking PowerShell for the non-admins is a no go. Because malware/cryptoware/privilege escalation uses most of the time Powershell. And a normal user.. does not need access to PowerShell (except for loading scripts 🙂 … Continue reading How to deploy HKCU registry changes while blocking powershell.