By now you may have PowerShell installed on more than a few machines. Maybe you even have the PowerShell CTP installed somewhere. Do you remember where you’ve installed PowerShell? Could someone else have installed PowerShell on a system without your knowledge? Perhaps an eager user?<\/p>\n
I put together a PowerShell function you can use to check if PowerShell is installed on a remote system.<\/p>\n
Function Get-PowerShellInstall { #registry hive constants #there is no provision for alternate credentials $basePath="software\\microsoft\\powershell\\1" $InstallPath=$reg.GetStringValue($HKLM,(Join-Path $basePath $ShellPath),"path").svalue <\/font><\/p>\n #only get other values if able to get a value for $InstallPath $Installed=$True } $InstallPath="" } <\/font><\/p>\n $obj=New-Object PSObject write $obj <\/font><\/p>\n }<\/font><\/p>\n Don’t try to copy and paste the function from the blog entry as it screws up some formatting details. I’ve attached it as a text file.<\/p>\n The script uses WMI and the StdRegProv to remotely connect to a specified computer’s registry. To accomplish this we create an instance of a WMIClass object using the [WMIClass] type adapter.<\/p>\n $Reg = [WMIClass]"\\$computer\\root\\default:StdRegProv<\/font>"<\/p>\n One drawback is that there is no way to specify alternate credentials so you can only connect to remote systems with your current credentials.<\/p>\n Once connected we can read installation information from the registry. Instead of returning basic information, the function returns a custom object. When you run the function you should get a result like this:<\/p>\n Computer : LOCALHOST But because the function returns an object and can accept input you can do things like this:<\/p>\n cat servers.txt | % { get-powerShellInstall $_ | where {$_.Installed}} | format-table Computer,InstallPath,ExecutionPolicy,Version -auto<\/font><\/p>\n Now you should be able to easily find out where PowerShell is installed and how it is configured.<\/p>\n By now you may have PowerShell installed on more than a few machines. Maybe you even have the PowerShell CTP installed somewhere. Do you remember where you’ve installed PowerShell? Could someone else have installed PowerShell on a system without your knowledge? Perhaps an eager user?<\/p>\n I put together a PowerShell function you can use to check if PowerShell is installed on a remote system.<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[25],"tags":[],"class_list":["post-248","post","type-post","status-publish","format-standard","hentry","category-windows-powershell"],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/dev.sapien.com\/blog\/wp-json\/wp\/v2\/posts\/248","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dev.sapien.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dev.sapien.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dev.sapien.com\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/dev.sapien.com\/blog\/wp-json\/wp\/v2\/comments?post=248"}],"version-history":[{"count":0,"href":"https:\/\/dev.sapien.com\/blog\/wp-json\/wp\/v2\/posts\/248\/revisions"}],"wp:attachment":[{"href":"https:\/\/dev.sapien.com\/blog\/wp-json\/wp\/v2\/media?parent=248"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dev.sapien.com\/blog\/wp-json\/wp\/v2\/categories?post=248"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dev.sapien.com\/blog\/wp-json\/wp\/v2\/tags?post=248"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nParam ([string]$computer="localhost") <\/font><\/p>\n
\n$HKLM=2147483650
\n$HKCU=2147483649
\n$HKCR=2147483648
\n$HKEY_USERS=2147483651 <\/font><\/p>\n
\n$Reg = [WMIClass]"\\$computer\\root\\default:StdRegProv" <\/font><\/p>\n
\n$ShellPath="shellids\\Microsoft.PowerShell"
\n$EnginePath="PowerShellEngine" <\/font><\/p>\n
\nif ($InstallPath) { <\/font><\/p>\n
\n$ExecutionPolicy=$reg.GetStringValue($HKLM,(Join-Path $basePath $ShellPath),"ExecutionPolicy").svalue
\n#if ExecutionPolicy key is missing then assume Restricted
\nif (-not $ExecutionPolicy) {
\n$ExecutionPolicy="Restricted"
\n}
\n$PowerShellVersion=$Reg.GetStringValue($HKLM,(Join-Path $basePath $EnginePath),"PowerShellVersion").svalue
\n$RunTimeVersion=$Reg.GetStringValue($HKLM,(Join-Path $basePath $EnginePath),"RunTimeVersion").svalue <\/font><\/p>\n
\nelse { <\/font><\/p>\n
\n$Installed=$False
\n$ExecutionPolicy=""
\n$PowerShellVersion=""
\n$RunTimeVersion="" <\/font><\/p>\n
\n$obj | Add-Member -MemberType NoteProperty -Name "Computer" -Value $computer.ToUpper()
\n$obj | Add-Member -MemberType NoteProperty -Name "Installed" -Value $Installed
\n$obj | Add-Member -MemberType NoteProperty -Name "InstallPath" -Value $InstallPath
\n$obj | Add-Member -MemberType NoteProperty -Name "ExecutionPolicy" -Value $ExecutionPolicy
\n$obj | Add-Member -MemberType NoteProperty -Name "Version" -Value $PowerShellVersion
\n$obj | Add-Member -MemberType NoteProperty -Name "RunTimeVersion" -Value $RunTimeVersion <\/font><\/p>\n
\nInstalled : True
\nInstallPath : C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe
\nExecutionPolicy : RemoteSigned
\nVersion : 1.0
\nRunTimeVersion : v2.0.50727<\/font><\/p>\n