System Control Panel

IP Address Administrator Login ID Password (not stored — PowerShell asks again)

Controls Select / unselect all

Apply = selected facility is restricted on that system. Remove = the restriction is lifted. The password is never saved in the file; PowerShell asks for it securely. User policies are written to every existing user profile and to the Default profile (new users). Changes take effect after the user logs off and on (F2 key and USB storage: restart the PC). Use only on systems you are authorized to manage.

How to run
1. Click Download .ps1 and Download run.bat. Keep both in the same folder.
2. Double-click run.bat. It opens PowerShell and asks for administrator permission by itself.
3. Type the password when PowerShell asks.

One-time setup on the TARGET PC (PowerShell as administrator, on that PC):
Enable-PSRemoting -Force

reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v LocalAccountTokenFilterPolicy /t REG_DWORD /d 1 /f

Also allow TCP port 5985 in its firewall and set its network profile to Private.