Solved

Windows 7 Software Restriction Policy

Posted on 2014-12-11
3
208 Views
Last Modified: 2014-12-11
I have a Windows 7 Professional workstation in a 2008 Server domain and this one workstation (and this one workstation only) has a software restriction policy in place that won't let it run Trend Micro. I have looked through the domain policies and the local workstation policies and both say there are no software restrictions in place.

The event log on the workstation said the SrpRuleGuid is  {196C5682-FAD7-48B3-8D07-97A838F30EDA} and it gives me the path to Trend. Any idea how I can find this restriction?
0
Comment
Question by:LockDown32
  • 2
3 Comments
 
LVL 53

Accepted Solution

by:
McKnife earned 500 total points
ID: 40495201
Look it up in regedit, that ID. Search for it.
Could be very well that a virus set this policy via direct registry manipulation.
0
 
LVL 15

Author Comment

by:LockDown32
ID: 40495295
That was one of the first places I looked. No joy.
0
 
LVL 15

Author Comment

by:LockDown32
ID: 40495383
I am going to correct myself. I searched for it a second time and it did show up. I didn't do something right the first time. Deleting the entries did the trick.
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

This article covers how to install the Microsoft Windows Operating System (OS). What is covered in this article:  > Different Versions and Editions of the Windows OS  > Upgrading versus Fresh Installation of the OS           - Steps to take pr…
Have you ever had a hard drive that you can't boot into, but need to change the registry? Here is the solution! This article guides you through accessing and editing a registry of a non-primary drive. To read registry information on a non-prim…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now