My security team is forcing us to disable WSL, and in my research I’ve seen methods using Powershell, Registry keys, and Intune, but none of those options are available, or they are unacceptable to security. I need a way to disable WSL if it is present, and keep users from installing WSL or enabling it in the “Add or Remove Windows Features” menu.

I’ve seen one suggestion of disabling the LxssManager service in Computer Config -> Policies -> Windows Settings -> Security Settings -> System Services, but LxssManager isn’t present there.

Co-Pilot suggested a path of Computer Configuration -> Administrative Templates -> Windows Components -> Windows Subsystem for Linux, which doesn’t exist either, and I can’t find any reference to online so I’ll assume it’s an AI hallucination.

Co-Pilot also suggested using a Software Restriction Policy to disallow the path “C:System32wsl.exe”, which seems like it could block the executable itself, but doesn’t stop someone from installing it in the first place.

I’m fine if the answer is “You can’t”, I just need someone who knows this better than I do to tell me so.