WellingtonIS
asked on
This app has been blocked by your system administrator
so far I have 3 machines doing this with no explanation at all. I am the system admin and I'm logged in as myself. I've made 0 changes on the domain and I have no reason for this. Has anyone seen this before? I can't even right click on anything or click the start button. My first thought was a virus but I've reimaged the machine only to have this issue reappear. Does anyone have any idea what's going on???? These are windows 10 1809.
noxcho
Any group policy which prohibits running such app?
ASKER
No I've made no changes and this just started yesterday.
Is GPO change logging enabled on the affected machines? If not, enable it and reboot. That might give some insight.
ASKER
GPO change logging? Where do I find that?
Which app is at issue?
See whether updates applied and now awaiting. Reboot.
See whether updates applied and now awaiting. Reboot.
ASKER
All apps and the start menu and basically everything is giving me this error.
On the system, if another user logs in, does it reoccur?
Do you use roaming profiles?
The profile might be corrupt.
Do you use roaming profiles?
The profile might be corrupt.
ASKER
no not that either. I reinstalled windows and logged in rebooted and it's doing it again
Is the issue isolated to your account or it applies to any user who logs into this system?
What is the application? Do you have a centralized anti-virus app that might be what is blocking...
What is the application? Do you have a centralized anti-virus app that might be what is blocking...
What is common to the ones exhibiting this issue versus the other systems?
WellingtonIS,
Find a machine where this issue is NOT taking place and verify what OU that machine is in.
If the machines that are having this issue are in a different OU it is most likely a gpo is affecting these machines.
As a test you can move the machines to the OU where the users are not having this issue, reboot the workstation, open up a command prompt and run gpudate /force and see if things change. If they do, you know a gpo is in place on the OU those machines were in originally.
Find a machine where this issue is NOT taking place and verify what OU that machine is in.
If the machines that are having this issue are in a different OU it is most likely a gpo is affecting these machines.
As a test you can move the machines to the OU where the users are not having this issue, reboot the workstation, open up a command prompt and run gpudate /force and see if things change. If they do, you know a gpo is in place on the OU those machines were in originally.
ASKER
I was able to contact Microsoft and the issue was AppLocker. Someone, not me put that in place. I had to take it out the following way:
secpol.msc
Application Control Policy
AppLocker
Packaged App rules - right click on this and choose "Create Default Rules"
In addition I added this to group policy to undo what someone did
secpol.msc
Application Control Policy
AppLocker
Packaged App rules - right click on this and choose "Create Default Rules"
In addition I added this to group policy to undo what someone did
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.