Execution policy Restricted doesn't allow any scripts to run, but single-line PowerShell commands can still be run. The Basic Information WCI filter uses a single command line, so that works regardless. For script-based inspections, WCI will try to set the execution policy to Remote Signed for the process scope. If you have it locked down by GPO so it cannot be changed even at the process scope, then you will not be able to use WCI filters that require scripts (like the SQL SMO filter).
↧