Configuring user settings in Group Policy is the best way for an administrator to implement the decision to restrict PowerShell access to only administrators. Group Policy is a feature of Windows that allows administrators to manage and enforce settings for users and computers in a domain. By using Group Policy, an administrator can create a policy that blocks or disables PowerShell for all users except for a particular group, such as administrators. This policy can be applied to all computers in the domain or to specific organizational units. This method is more effective and manageable than uninstalling PowerShell, monitoring event logs, providing user education, or blocking PowerShell via HIDS. Verified References:
* https://www.windowscentral.com/how-disable-powershell-windows-10
* https://learn.microsoft.com/en-us/answers/questions/195218/how-to-restrict-powershell-for-all-users- except-fo
* https://windowsloop.com/block-disable-powershell/