Solved

SRP (Software Restriction Policies) is blocking local Administrator.

Posted on 2011-02-10
4
893 Views
Last Modified: 2012-05-11
I implemented SRP on a Windows 7 Pro PC that I was logged into as the Local Administrator. In Enforcement I ensured that "All users except local administrators" was selected. I then set the default Security Level to Disallow. At this point I attempted to open Windows Update from the Start menu and was blocked. I ran gpupdate, still blocked. I rebooted the PC, still blocked. I changed the default Security Level back to Unrestricted and was no longer blocked. Why is'nt the "All users except local administrators" enforcement variable working? This is the 9th PC I've setup with SRP, all the same configuration, and all the others work fine. Any ideas?
0
Comment
Question by:tstarlin
  • 2
  • 2
4 Comments
 
LVL 12

Expert Comment

by:DarinTCH
ID: 34865845
run RSOP
resultant set of policy
to determine what is being applied
compare to working unit
0
 

Author Comment

by:tstarlin
ID: 34866338
Ran RSOP and compared a PC that the local Administrator isnt being blocked to the one that is. Went line by line. There is no difference at all.
0
 
LVL 12

Accepted Solution

by:
DarinTCH earned 250 total points
ID: 34893916
wow
that makes it a bit more difficult

here is the only other thing I have seen similiar
some laptops were on a domain and some were not
some were in a blocked OU (inheritance)
an admin made a change to the default domain policy and
checked policy enforcement
the OUs below the primary container were effected eventhough they had block inheritance set up...
the admin tried to be slick and 'turn off' the items he changed...but
after he activated a change... just choosing not applied DOES NOT UNDO the changes he made
we ended up reimaging the laptops to solve his 'unintentional changes

p.s. it took quite a while to figure this out
0
 

Author Comment

by:tstarlin
ID: 34897280
DarinTCH, I'm guessing this may be a similar situation. I'm going to reformat this PC and start from scratch. It has to be some kind of glitch. Thank you for your thoughts and take care.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

You may have a outside contractor who comes in once a week or seasonal to do some work in your office but you only want to give him access to the programs and files he needs and keep privet all other documents and programs, can you do this on a loca…
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
In this Micro Tutorial viewers will learn how to use Boot Corrector from Paragon Rescue Kit Free to identify and fix the boot problems of Windows 7/8/2012R2 etc. As an example is used Windows 2012R2 which lost its active partition flag (often happen…
The viewer will learn how to successfully download and install the SARDU utility on Windows 7, without downloading adware.

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question