[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Win2003: cannot install some software as domain administrator due to software restriction policy

Posted on 2014-08-24
13
Medium Priority
?
536 Views
Last Modified: 2014-08-29
Hi,

I have an old Windows 2003R2 domain controller. I need to install a program on it.

When I do, I get the following error: Windows cannot open this program because it has been prevented by a software restrictions policy.

I have:
- checked all policy's which are in effect: domain policy, domain controller policy, local policy, none of them have a software restrictions policy (never has).
- made a new software restrictions policy, where under enforcement I have excluded local admins, reboot.
- made a new user equal to domain admin
- disabled all NON Microsoft services and reboot.
- tried to install to different folder (not in program files).
- cleanded up temporary files.
- eventlog only shows error, no clues there.
- virus scan, eset + hitmanpro, nothing.

None of this has worked...

Anyone suggestions?

Kind regards,
Ray
0
Comment
Question by:Raymond Jansen
  • 7
  • 5
13 Comments
 
LVL 3

Expert Comment

by:andrewjamesb
ID: 40281447
Hi Ray

Have you tried logging onto this 2003 server using the domain / enterprise admin account?

Alternatively. press right shift and right click on the software you wish to install and select run as different user. Enter the domain / enterprise admin account credentials here

Hope this is of some help

Thanks
Andy
0
 
LVL 7

Author Comment

by:Raymond Jansen
ID: 40281449
Hi Andy,

I have tried that. Also I have made another admin account, also no luck.
0
 
LVL 3

Expert Comment

by:andrewjamesb
ID: 40281456
Hi Ray

Try placing the server into the staging OU within AD and you should then be able to install any software you desire as no GPO's will be applied whilst in staging. This will work

Thanks
Andy
0
Fill in the form and get your FREE NFR key NOW!

Veeam is happy to provide a FREE NFR server license to certified engineers, trainers, and bloggers.  It allows for the non‑production use of Veeam Agent for Microsoft Windows. This license is valid for five workstations and two servers.

 
LVL 7

Author Comment

by:Raymond Jansen
ID: 40281463
Hi Andy,

Sorry, but I don't understand (and can't quick find on google). How do I place the DC in the staging ou?
0
 
LVL 3

Expert Comment

by:andrewjamesb
ID: 40281470
Hi Ray

Open up Active Directory then search for that server. Right click once the server is found and move to the staging OU within AD

Thanks
Andy
0
 
LVL 7

Author Comment

by:Raymond Jansen
ID: 40281475
Hi Andy,

I can find the server in AD, it is in Domain Controllers OU. I can right click and see move, but I can't find a staging OU.

Thanks,
Ray
0
 
LVL 7

Author Comment

by:Raymond Jansen
ID: 40281477
Also, I did a search in AD for OU's named staging, nothing...
0
 
LVL 3

Expert Comment

by:andrewjamesb
ID: 40281479
Hi Ray

Your half way there. In that case you will need to create a staging OU. I am sure there should already be one on your domain as standard, surely? This is basic stuff to be fair.
0
 
LVL 3

Expert Comment

by:andrewjamesb
ID: 40281485
No offense but I would be very concered if you were administering my corporate network as you dont know much about staging OU. I would suggest you speak with one of your Wintel engineers to determine what equivalent staging OU is on your domain, or to get someone to set that up for you
0
 
LVL 3

Expert Comment

by:ebad-it
ID: 40281574
Hi Ray,

I think the OU andrewjamesb is referring to is called Computers it's usually the default OU computers get placed when they first join the domain.  I would highly suggest some MS admin training to get you more comfortable with domain work just my 2 cents.

Good Luck!
0
 
LVL 7

Author Comment

by:Raymond Jansen
ID: 40282003
@Andy: I'm doing this for some time now. I did never hear something about a staging OU, nor can I find this fully explaned on Google. From what you're writing I understand that it's an OU where I should block all policies from being applied.

I really believe that this workaround could work, however, it does not solve my original problem. This DC 'thinks' that there is a software restriction policy in effect, while it is not. I have checked with gpresult.

If I can't solve it, the more easy way was to transfer the program to another DC in the same site, with Windows 2012R2, which does NOT have this problem.

And yes, probably I don't know everything, and never will. That's why I ask for help here!

But, it would be nice if the original problem could be solved (other then re-installing). I have 1 program that simply will not run on anything else then Windows 2003 server....

Thanks anyway,
Ray
0
 
LVL 7

Accepted Solution

by:
Raymond Jansen earned 0 total points
ID: 40282578
Found! It turned out that the culprit is windows update kb2918614. After removing this, restart, everything works fine.
0
 
LVL 7

Author Closing Comment

by:Raymond Jansen
ID: 40292150
See previous comment.
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…
This lesson discusses how to use a Mainform + Subforms in Microsoft Access to find and enter data for payments on orders. The sample data comes from a custom shop that builds and sells movable storage structures that are delivered to your property. …
Is your OST file inaccessible, Need to transfer OST file from one computer to another? Want to convert OST file to PST? If the answer to any of the above question is yes, then look no further. With the help of Stellar OST to PST Converter, you can e…

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question