Either with AppLocker \ WDAC or

Check

$ExecutionContext.SessionState.LanguageMode

1. Create/Edit a GPO: In Group Policy Management, create a new GPO (e.g., “Set CLM to 4”).
2. Navigate to Preferences: Go to Computer Configuration > Preferences > Windows Settings > Environment.
3. Add Variable: Right-click, select New > Environment Variable.
   • Action: Update
   • Name: __PSLockdownPolicy
   • Value: 4
   • Type: System Variable

Windows Security – Locking Down Powershell Script Execution (from ThioJoe Video) · GitHub

[System.Environment]::SetEnvironmentVariable('__PSLockdownPolicy', '4', 'Machine')

Restart PS After

If you get stuck rollback is

reg delete "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment" /v __PSLockdownPolicy /f