Link to home
Start Free TrialLog in
Avatar of PramoIT
PramoITFlag for Netherlands

asked on

GPO Software restriction mailto link

Hi,

We have a terminal server (2008 r2) and a domaincontroller (2008 r2) on which we have defined a gpo for software restriction.

Now users can't click mailto links on a webpage. They get the message that the program is block by grouppolicy.

When we turn off the software restriction policy for a user, he/she can click a mailto link and it works fine.

This is how the gpo setting looks like.

Thanks.
gpo-sr.jpg
ASKER CERTIFIED SOLUTION
Avatar of McKnife
McKnife
Flag of Germany image
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Avatar of Santosh Gupta
Santosh Gupta
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of PramoIT
PramoIT
Flag of Netherlands image

ASKER

Hi mcknife,

Thanks!

I have turned on logging by creating HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers
String Value: LogFileName, <path to a log file>

And saw that when clicking on mailto link, the system tries to open c:\progra~1 instead of c:\program files

These 2 paths are in fact the same, but not for the software restriction gpo. So i added c:\progra~1 to the paths and now it works.
Avatar of McKnife
McKnife
Flag of Germany image
Ok...

FYI, there was already a logging section in eventviewer, I guess it would appear in the application log file.