Domain GPO - Software Restriction Policies

Computer configuration > Windows Settings > Security Settings > Software Restriction Policies

I have %APPDATA% blocked - but I want to allow appdata\roaming\spotify\spotify.exe to run .. below is what I have in the GPO but I still can get spotify.exe to run.

GPO
GPO2
GorapsI.T. ManagerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Will SzymkowskiSenior Solution ArchitectCommented:
Have you tried using the %appdata% in your unrestricted path? You have %appdata\roaming\spotify.exe% which is not a vailid path.

Try %appdata%\roaming\spotify.exe

Will.
0
Radhakrishnan RSenior Technical LeadCommented:
Hi,

You can try to create a file rule (Hash Rule) which pointing to %appdata%\roaming\spotify.exe and make it Unrestricted and see it works.

Cheers
RK
0
GorapsI.T. ManagerAuthor Commented:
SO even tho the path is appdata\roaming\spotify\spotify.exe  still use %appdata%\roaming\spotify.exe
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Will SzymkowskiSenior Solution ArchitectCommented:
SO even tho the path is appdata\roaming\spotify\spotify.exe  still use %appdata%\roaming\spotify.exe

If that is the full path then use the full path. In your screenshot your had %appdata...\% which is not valid.

make sure that %appdata%\....

Will.
0
GorapsI.T. ManagerAuthor Commented:
That didn't work... and the hash rule wants me to browse to the file but the file is not located on the server.. It's on the workstations that this GPO applies too.
0
Radhakrishnan RSenior Technical LeadCommented:
Hi,

Copy the exe from the workstation and place it in the same location on the server and add the hash rule. Probably that works.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
McKnifeCommented:
%appdata% resolves to C:\Users\yourUser\AppData\Roaming, so roaming is included already.
Use %appdata%\Spotify.exe or hash the copied exe like said before.
0
GorapsI.T. ManagerAuthor Commented:
Unable to hash because I am unable to install spotify on the server.  the other suggestions didnt work.
0
McKnifeCommented:
Copy spotify.exe to a share and access it from the server, that's all it takes to create a hash.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.