Cireson Portal

How To: Temporarily Disable the PowerShell Script Execution Policy for a Computer

Introduction

When installing the Cireson Portal you may get errors in the installation log that a PowerShell command was not able to run because a command was not recognized.  For example:

The term 'Invoke-Sqlcmd' is not recognized as the name of a cmdlet, function, script file, or operable program.

This is often the result of a policy either locally on the computer or from a group policy object the prevents executing a PowerShell script that is not properly signed.

This article describes how to temporarily change the script execution policy to allow the installer to successfully execute the necessary PowerShell commands to install the portal.

Changing the Local Policy

Open a PowerShell prompt as an elevated administrator.

Run this command:

Get-ExecutionPolicy

This will result in one of three levels (from least restrictive to most restrictive):

  • Unrestricted
  • RemoteSigned
  • AllSigned

Make a note of the current policy level so that you can set it back to the original policy after the installation is run.  If the policy level is currently something other than Unrestricted run this command:

Set-ExecutionPolicy Unrestricted

Run the Cireson Portal installer.

After the installation is completed set the policy back to the original value by running this command:

Set-ExecutionPolicy

Example:

Set-ExecutionPolicy AllSigned

Changing the Group Policy Object

In some cases you may not be able to change the policy locally because the computer is the target of a group policy object that sets the execution policy.  In this case you will need to change the group policy object to exclude the computer you are trying to install on temporarily. 

  1. Open the Group Policy Management MMC snapin.
  2. Find the Group Policy that is applying the execution policy and select it.
  3. Select the Delegation tab.
  4. Click the Advanced... button.
  5. Click Add...
  6. Click Object Types...
  7. Check the Computers box if it is not already checked and click OK.
  8. Search for the computer you want to exclude temporarily and click OK.
  9. Make sure the computer is selected in the Group or user names box.
  10. In the permissions box at the bottom check the box in the Deny column next to Apply group policy.
  11. Click OK
  12. Login to the computer where you will be doing the installation.
  13. Open a cmd prompt as an elevated administrator.
  14. Run the following command:
  15. gpupdate /force
  16. Wait for the group policy update to complete.
  17. Install the Cireson Portal.
  18. Return to the group policy configuration and remove the computer from the group or user names list.
  19. Run gpupdate /force again.

Â