asked on

Domain GPO - Software Restriction Policies

Computer configuration > Windows Settings > Security Settings > Software Restriction Policies

I have %APPDATA% blocked - but I want to allow appdata\roaming\spotify\spotify.exe to run .. below is what I have in the GPO but I still can get spotify.exe to run.

Will Szymkowski

Have you tried using the %appdata% in your unrestricted path? You have %appdata\roaming\spotify.exe% which is not a vailid path.

Try %appdata%\roaming\spotify.exe

Will.

Radhakrishnan

Hi,

You can try to create a file rule (Hash Rule) which pointing to %appdata%\roaming\spotify.exe and make it Unrestricted and see it works.

Cheers
RK

Goraps

ASKER

SO even tho the path is appdata\roaming\spotify\spotify.exe still use %appdata%\roaming\spotify.exe

Will Szymkowski

SO even tho the path is appdata\roaming\spotify\spotify.exe still use %appdata%\roaming\spotify.exe

If that is the full path then use the full path. In your screenshot your had %appdata...\% which is not valid.

make sure that %appdata%\....

Will.

Goraps

ASKER

That didn't work... and the hash rule wants me to browse to the file but the file is not located on the server.. It's on the workstations that this GPO applies too.

ASKER CERTIFIED SOLUTION

Radhakrishnan

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

McKnife

%appdata% resolves to C:\Users\yourUser\AppData\Roaming, so roaming is included already.
Use %appdata%\Spotify.exe or hash the copied exe like said before.

Goraps

ASKER

Unable to hash because I am unable to install spotify on the server. the other suggestions didnt work.

McKnife

Copy spotify.exe to a share and access it from the server, that's all it takes to create a hash.