Solved

GPO preventing application launch at login

Posted on 2009-05-13
10
612 Views
Last Modified: 2012-05-06
I just recently installed an application on a machine that runs off the hkey local machine "run" settings in registry.  Any user that attempts to log on in theory should have the application boot for them.  The application boots in the processes tree under the current user as opposed to system however, despite being a member of the HKey Local Machine registry group.

The issue I am having with the application is the following:

The application boots up for all users except users of a specific OU whose Group Policy is extremely tightened down.  I have tried to add the programs as an exception and can run under users\administrative templates\system\ run only allowed windows applications GPO, however the program still will not launch when the user logs in.

Are there any other GPOs that could potentially be turned on that I am missing that are preventing this application from booting when the user logs on?
0
Comment
Question by:megnin
  • 6
  • 3
10 Comments
 
LVL 15

Assisted Solution

by:zelron22
zelron22 earned 400 total points
ID: 24378356
Have you run a group policy results in the GPMC to see which policies are winning for those users on those machines?
0
 
LVL 15

Assisted Solution

by:zelron22
zelron22 earned 400 total points
ID: 24378369
0
 
LVL 3

Assisted Solution

by:a_ro_no
a_ro_no earned 100 total points
ID: 24378374
Sure! Software Policies?
User Configuration, Software settings, Software installation
0
VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

 
LVL 1

Author Comment

by:megnin
ID: 24379015
We don't have any Software Policies.
0
 
LVL 1

Author Comment

by:megnin
ID: 24379710
The Policy that holds the executables that are permitted to run is the winning GPO.  This brings me right back to the beginning of where I started as there is no software policy enabled in the GPO.  There is likely a policy of some sorts that is enabled and also a winning policy that is preventing this application from loading its process at the start.

0
 
LVL 1

Author Comment

by:megnin
ID: 24398542
Still haven't been able to find what policy is "winning" and preventing the application from running.
0
 
LVL 15

Accepted Solution

by:
zelron22 earned 400 total points
ID: 24399292
Have you checked the security logs on one of the PCs?  Has security to anything on the C: drive been locked down further that might prevent the users access to temp folders, or the application folder?
0
 
LVL 1

Author Comment

by:megnin
ID: 24444088
I'll check that.  Thanks
0
 
LVL 1

Author Comment

by:megnin
ID: 24444731
I discovered the issue as the person that put the exe in forgot a letter.  Lesson for the day, double check others work instead of giving them the benefit of the doubt
0
 
LVL 1

Author Closing Comment

by:megnin
ID: 31581165
Thanks for the additional perspectives!
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, we will see the basic design consideration while designing a Multi-tenant web application in a simple manner. Though, many frameworks are available in the market to develop a multi - tenant application, but do they provide data, cod…
This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now