

You can manage the TPM using Windows PowerShell. The command number you entered is added to the blocked list. In the Command Number text box, type the number of the new command that you want to block, and then select OK. The Block New Command dialog box is displayed. In the Action pane, select Block New Command.

If Allow Selected Command is unavailable, that command is currently blocked by Group Policy. Under Actions, select Block Selected Command or Allow Selected Command as needed. In the list, select a command that you want to block or allow. In the console tree, select Command Management. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then select Yes. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then select Yes.įor a list of commands, see links in the TPM Specification.Īfter you have added numbers for each command that you want to block, select OK twice.īlock or allow TPM commands by using the TPM MMC Open the Local Group Policy Editor (gpedit.msc). Block TPM commands by using the Local Group Policy Editor You must be a member of the local Administrators group.
#CONTROL PANEL COMMAND LINE HOW TO#
The following procedures describe how to manage the TPM command lists. Because some hardware vendors might provide additional commands or the Trusted Computing Group may decide to add commands in the future, the TPM MMC also supports the ability to block new commands. The list can be created and applied to all computers in a domain by using Group Policy, or a list can be created for individual computers by using the TPM MMC. This article for the IT professional describes how to manage which Trusted Platform Module (TPM) commands are available to domain users and to local users.Īfter a computer user takes ownership of the TPM, the TPM owner can limit which TPM commands can be run by creating a list of blocked TPM commands.
