Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

SRP (Software Restriction Policies) is blocking local Administrator.

Posted on 2011-02-10
4
Medium Priority
?
930 Views
Last Modified: 2012-05-11
I implemented SRP on a Windows 7 Pro PC that I was logged into as the Local Administrator. In Enforcement I ensured that "All users except local administrators" was selected. I then set the default Security Level to Disallow. At this point I attempted to open Windows Update from the Start menu and was blocked. I ran gpupdate, still blocked. I rebooted the PC, still blocked. I changed the default Security Level back to Unrestricted and was no longer blocked. Why is'nt the "All users except local administrators" enforcement variable working? This is the 9th PC I've setup with SRP, all the same configuration, and all the others work fine. Any ideas?
0
Comment
Question by:tstarlin
  • 2
  • 2
4 Comments
 
LVL 12

Expert Comment

by:DarinTCH
ID: 34865845
run RSOP
resultant set of policy
to determine what is being applied
compare to working unit
0
 

Author Comment

by:tstarlin
ID: 34866338
Ran RSOP and compared a PC that the local Administrator isnt being blocked to the one that is. Went line by line. There is no difference at all.
0
 
LVL 12

Accepted Solution

by:
DarinTCH earned 1000 total points
ID: 34893916
wow
that makes it a bit more difficult

here is the only other thing I have seen similiar
some laptops were on a domain and some were not
some were in a blocked OU (inheritance)
an admin made a change to the default domain policy and
checked policy enforcement
the OUs below the primary container were effected eventhough they had block inheritance set up...
the admin tried to be slick and 'turn off' the items he changed...but
after he activated a change... just choosing not applied DOES NOT UNDO the changes he made
we ended up reimaging the laptops to solve his 'unintentional changes

p.s. it took quite a while to figure this out
0
 

Author Comment

by:tstarlin
ID: 34897280
DarinTCH, I'm guessing this may be a similar situation. I'm going to reformat this PC and start from scratch. It has to be some kind of glitch. Thank you for your thoughts and take care.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
In this Micro Tutorial viewers will learn how to use Boot Corrector from Paragon Rescue Kit Free to identify and fix the boot problems of Windows 7/8/2012R2 etc. As an example is used Windows 2012R2 which lost its active partition flag (often happen…
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…
Suggested Courses

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question