Enable powershell support on windows agent
Introduction
Since OCS Inventory Windows Agent 2.4.0.0, the agent can now execute powershell script in the plugin directory.
However, some manipulation are required to enable powershell script. Windows' default execution policy is really restrictive and will prevent the OCS Agent to properly create a powershell process
List execution policies by scope
In the first place, you may want to see what policies are active on your computer. To list the policies you need to open a powershell window and type:
Get-ExecutionPolicy -List
The output will look like this :
Scope ExecutionPolicy
----- ---------------
MachinePolicy Undefined
UserPolicy Undefined
Process Undefined
CurrentUser AllSigned
LocalMachine RemoteSigned
If you want more informations on ExecutionPolicies, please see Windows' MSDN link on execution policies
Set execution policies by scope
To make the OCS Agent work, you need to set the Process
and LocalMachine
to Unrestricted
The command is the following :
Set-ExecutionPolicy -Scope {MyScope} -ExecutionPolicy {Policy Level}
In our case:
Set-ExecutionPolicy -Scope LocalMachine -ExecutionPolicy Unrestricted
Set-ExecutionPolicy -Scope Process -ExecutionPolicy Unrestricted
OCS Agent will now be able to execute powershell scripts for plugins.
For more informations, see : Set-ExecutionPolicy Documentation
Lift execution policy restrictions using GPO
If you would like to contribute to this section, our Github repository below is directly linked to our documentation.