Solved

Group Policy blocking software on Windows 7 machine - not on domain

Posted on 2013-02-04
12
2,113 Views
Last Modified: 2013-02-08
I've got a home customer using a HP Touchsmart computer that randomly started having certain applications blocked by group policy; AVG, Malwarebytes, Quicken installer to name a few. I do not see any programs being blocked under gpedit->Computer Configuration->Windows Settings->Security Settings->Software Restriction Policies - or- Application Control Policies->AppLocker.
These programs appear to function properly in safe mode. The computer is NOT part of a domain (just a standard workgroup), nor has it ever been. The user is an administrator on the computer.
I was able to download this which allows me to 'unlock' the station and allows all software to run properly, but don't want to have to tell a customer that he has to run that every time he restarted the computer. Once the computer was 'unlocked' I ran full scans of the computer with CCleaner, AVG, Malwarebytes, and TDSSKiller, all of which came back clean, these scans were also all run in safemode.

Are there any suggestions/places to look? I'm kinda at a loss for where else to look.
0
Comment
Question by:PortableCIO
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
12 Comments
 
LVL 23

Expert Comment

by:Thomas Grassi
ID: 38852317
Which version of Windows 7?  

run gpedit.msc and check settings
0
 

Author Comment

by:PortableCIO
ID: 38852328
I believe it's just home premium, and as I stated, I looked through GPEDIT and didn't find any red flags. I looked through:
gpedit->Computer Configuration->Windows Settings->Security Settings->Software Restriction Policies
-and-
gpedit->Computer Configuration->Windows Settings->Security Settings->Application Control Policies->AppLocker
and in neither location are there any restrictions defined.
0
 
LVL 23

Expert Comment

by:Thomas Grassi
ID: 38852339
Ok
lets run msconfig
under services tab hide all microsoft services then disable all others
under startup tab disable all

restart computer see is problem continues.
0
Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

 

Author Comment

by:PortableCIO
ID: 38852352
Yes, the problem persists. I've done a manual disabling of items at startup (services and programs), as well as just doing a "Diagnostics Boot", and the problem continues to be present.
0
 
LVL 23

Expert Comment

by:Thomas Grassi
ID: 38852376
something is conflicting here

I know you tried manually stopping services but I would suggest trying the msconfig method.

easy to miss something.

What errors you receiveing? event log messages?
0
 

Author Comment

by:PortableCIO
ID: 38852416
Shouldn't a diagnostics boot disabled all non-windows services? The only errors I'm receiving are coming up when I try and launch certain applications (currently that list consists of AVG, Malwarebytes, Quicken autorun, Quicken installer, and LogMeIn Rescue), stating that this program has been blocked by a group policy. No specific error codes are present.
0
 
LVL 23

Expert Comment

by:Thomas Grassi
ID: 38852564
diagnostics boot is usually hardware checking

If they are functioning in Safe mode then something running is conflicting.

msconfig is only way to test this out.

No errors in the application log?
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 38852677
0
 

Author Comment

by:PortableCIO
ID: 38852708
I have tried both with, and without UAC enabled. No change. The computer is not in our office so I haven't been able to check the error logs.
0
 
LVL 55

Accepted Solution

by:
McKnife earned 500 total points
ID: 38852941
Hi.

[Home premium has no applocker nor gpedit.msc. For applocker it has to be the enterprise edition, even.]
PortableCIO, you should reinstall the computer, it was severly infected. That's the best way unless you are able to judge its state from an offline bootdisk. Running online scans on an infected machine often leads to nothing.
0
 
LVL 23

Expert Comment

by:Thomas Grassi
ID: 38853243
I would to see what is in the log first before we determine what to do next.
0
 

Author Closing Comment

by:PortableCIO
ID: 38869060
Not going to bother wasting time on the issue... a rebuild is in order.

Thanks for everyone's help
0

Featured Post

Salesforce Made Easy to Use

On-screen guidance at the moment of need enables you & your employees to focus on the core, you can now boost your adoption rates swiftly and simply with one easy tool.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

So many times I have seen the words written in a question "if only I could show you" or " I know how hard it is for you since you can't see it" in any zone. That has inspired me to write about this tool in windows 7 called "Problem Steps Recorder…
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
This Micro Tutorial will teach you how to change your appearance and customize your Windows 7 interface to your unique preference. This will be demonstrated using Windows 7 operating system.

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question