Avatar of tarros
 asked on

Software Restriction policies problem on win 7

Good morning all,
We are on Windows 7 SP1 and if I try to install any program I receive the following error:
so: win7 pro sp1

the pc is joined to my domain and no particular SoftwareRestrictionPolicies are set.

    how can i verify that rule {399de....9df1} ?
      i note that the path of user profile folder is different from the real folder name and contains the special character ~, can be that the problem?

      Many thanks in advance.
      Windows OSWindows 7

      Avatar of undefined
      Last Comment
      Seth Simmons

      8/22/2022 - Mon

      Hi Tarros,

      The username in the folder is the same user, the ~ (tilde) is used when using the DOS version of a file/directory name (as it is limited to 8 characters, I think it was 8)

      It is trying to run stub.exe from your Temp directory. Stub.exe seems to be a file used by both Mozilla Firefox & AVG Antivirus products for installation/upgrade. Most likely your domain has a restriction on executing files from the Temp directory.

      I would suggest clearing out your temp directory, then using Event Viewer try to find what application is erroring during install/update and remove/re-install that application.

      Hope this helps.

      View this solution by signing up for a free trial.
      Members can start a 7-Day free trial and enjoy unlimited access to the platform.
      See Pricing Options
      Start Free Trial
      Ask your own question & get feedback from real experts
      Find out why thousands trust the EE community with their toughest problems.


      This looks like there is a path rule set for restricting the path %UserProfile%\Appdata\Local\Temp.  So, if any application trying run from this location can be restricted.

      You need to run gpresult or rsop and found out which policy is getting applied for this user and locate Computer Configuration>>Policies>>Windows Settings>>Security settings>>Software Restriction Policies.

      As was pointed out, it is not a problem, the first torrac~1..

      You said you had a problem, what are you looking to do?
      The {39. Is the GPO GUID.

      If your naming convention is discriptive, the software restriction GPO GUID should match the one reported.

      This rule is an anti-ransomeware type . ...
      This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.
      Seth Simmons

      No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

      I have recommended this question be closed as follows:

      Accept: Kimputer (https:#a42378204)

      If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.

      Experts-Exchange Cleanup Volunteer