how to block GET-ADUSER command on Powershell

Vignesh Vijayakumar 1 Reputation point
2022-03-09T18:28:27.407+00:00

Hello all,

I want to block GET-ADUSER command execution on PowerShell to all AD users.

And I would like to block users from opening AD users and computers application.

How do I block the above two features?

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,173 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,899 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,729 questions
Windows Server PowerShell
Windows Server PowerShell
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.PowerShell: A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
5,381 questions
0 comments

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Gary Reynolds 9,391 Reputation points
    2022-03-09T19:28:16.473+00:00
  2. Rich Matheisen 45,091 Reputation points
    2022-03-09T19:51:07.377+00:00

    You can use "Just Enough Administration" (JEA) to do that. Here's a link: overview

    0 comments
  3. SChalakov 10,261 Reputation points MVP
    2022-03-10T12:07:41.637+00:00

    Hi,

    what about uninstalling the Active directory PowerShell module?

    Regards,
    Stoyan