To do this, create a new GPO and drill down to: Computer configuration->Policies->Windows settings->Security Settings->File System Add each file below, removing Users from the permissions so it’s only Administrators, Creator Owner and System: %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Administrative...