Cyber Security News

Microsoft Removes PowerShell 2.0 From Windows To Clean Up Legacy Code

Microsoft is officially removing Windows PowerShell 2.0 from its operating systems, marking the end of an era for the legacy scripting component that has been deprecated since 2017.

The removal affects Windows 11 version 24H2 starting August 2025 and Windows Server 2025 beginning September 2025, with Windows Insider preview builds already reflecting this change as of July 2025.

Legacy Cleanup Rollout Timeline

The PowerShell 2.0 removal follows a systematic timeline that Microsoft has been telegraphing for years.

Windows Insider preview builds began excluding the PowerShell 2.0 feature in July 2025, giving developers and IT administrators advance notice of the impending change.

The broader rollout schedule targets Windows 11 version 24H2 users in August 2025, followed by Windows Server 2025 deployments in September 2025.

All subsequent Windows releases will permanently exclude PowerShell 2.0, which originally debuted with Windows 7.

The component has remained available as an optional feature for compatibility purposes since its deprecation announcement, but Microsoft has now determined that maintaining this legacy code is no longer justified.

Windows Insider participants have already experienced the removal firsthand, providing real-world testing data for the broader deployment.

Security & Complexity Reduction

Microsoft’s decision stems from broader objectives to enhance Windows security and reduce system complexity.

PowerShell 2.0’s aging architecture presents potential security vulnerabilities that newer versions have addressed through improved design and updated security protocols.

By eliminating legacy code paths, Microsoft can focus development resources on maintaining and improving current PowerShell versions while reducing the overall attack surface of Windows installations.

The PowerShell ecosystem has evolved significantly since version 2.0’s introduction, with PowerShell 5.1 and PowerShell 7.x offering substantial improvements in functionality, performance, and security.

These newer versions provide backward compatibility for most commands and modules, making the transition technically feasible for the majority of use cases.

Microsoft’s engineering teams have determined that supporting multiple PowerShell versions creates unnecessary complexity without corresponding benefits for most users.

Affected User Migration

For the vast majority of Windows users and organizations, this change will require no action, as modern software and scripts already utilize newer PowerShell versions.

However, users with legacy dependencies must take proactive steps to avoid disruptions. Microsoft’s recommended mitigation strategies include:

  • Migrate to newer PowerShell versions: Update existing scripts and tools to PowerShell 5.1 or PowerShell 7, which offer enhanced capabilities and backward compatibility for most commands and modules.
  • Upgrade outdated software: Replace legacy applications that require PowerShell 2.0 with newer versions that support modern PowerShell implementations.
  • Update Microsoft server products: Transition from older versions of Exchange, SharePoint, and SQL Server that relied on PowerShell 2.0 to current iterations with modern PowerShell support.
  • Contact third-party vendors: Check with software vendors for updated releases that eliminate PowerShell 2.0 dependencies, as many have addressed this requirement following the 2017 deprecation.

For users unable to immediately migrate, Microsoft recommends conducting comprehensive testing to identify PowerShell 2.0 dependencies before the August and September 2025 deadlines.

The PowerShell team has published detailed migration guidance to assist users in transitioning scripts and workflows to supported versions, ensuring continuity of operations while embracing modern PowerShell capabilities.

Uncover full scope of any attack any attack from hidden redirects to payloads in minutes — Try ANY.RUN free for 14 days.

Kaaviya

Kaaviya is a Security Editor and fellow reporter with Cyber Security News. She is covering various cyber security incidents happening in the Cyber Space.

Recent Posts

Hackers Target AI Infrastructure With RCE, Prompt Injection and API Key Theft

Hackers are actively probing AI systems, turning exposed gateways and agent tools into routes for…

4 hours ago

Hackers Make Phishing Pages Change Their Code Every Time Someone Opens Them

Hackers are making some phishing pages harder to track by changing the code delivered to…

4 hours ago

Iran-Linked Hackers Reportedly Knock UK Power Plant Offline for Four Days

A cyber incident reportedly forced a British power plant to halt operations for about four…

5 hours ago

Russian Hackers Use New HOOKEDGE Malware to Spy on European Defense and Diplomatic Targets

Russian hackers have used a new backdoor called HOOKEDGE to target defense manufacturers, government bodies,…

5 hours ago

Ransomware Gang Claims AI Can Analyze 700GB of Stolen Data Every Hour

TITAN ransomware is pairing file encryption with an ambitious claim: artificial intelligence that can sort…

5 hours ago

Hackers Compromise Hundreds of WordPress Sites to Deploy Amatera Stealer via ClickFix

A fake student resume is being used to place a remote-access tool on researchers’ Windows…

7 hours ago