Software Restrictions via Group Policy

Posted on 2014-08-01
Last Modified: 2014-08-01
Having trouble with this one.  So I have %AppData%\*\PFSetup.exe setup as unrestricted and %AppData%\Local\Temp\PFSetup.exe as well because I'm unsure where it installs from

But I get this in the error log.

Access to C:\Users\ADMINI~1\AppData\Local\Temp\PFSetup.exe has been restricted by your Administrator by location with policy rule {542edcef-766b-4b80-94e2-42e180f6675d} placed on path C:\Users\administrator\AppData\Local\*\*.exe.

I do have a restriction on appdata\local\*.\*.exe but does this take precedence?
Question by:stlhost
    LVL 5

    Expert Comment

    Yes it does.  I ran into the same issue when setting up exceptions.
    LVL 52

    Accepted Solution

    It is all explained in here:
    If two identical rules with differing security levels are applied to software, the more conservative rule takes precedence. For example, if two hash rules--one with a security level of Disallowed and one with a security level of Unrestricted--are applied to the same software program, the rule with a security level of Disallowed takes precedence, and the program will not run.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    Suggested Solutions

    If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
    Healthcare organizations in the United States must adhere to the guidance of both the HIPAA (Health Insurance Portability and Accountability Act) and HITECH (Health Information Technology for Economic and Clinical Health Act) for securing and protec…
    This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
    This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now