Re: Software Restriction Policies with Office XP Failing

From: Chris Weber (chrisw@lookout.net)
Date: 07/22/02 

From: "Chris Weber" <chrisw@lookout.net>
Date: Mon, 22 Jul 2002 12:20:39 -0700

Graham, I tried emailing you direct but got an NDR.

I couldn't comment on your question, though I have seen references to Office
XP SRP configurations in John Lambert's white paper:
http://www.microsoft.com/windowsxp/pro/techinfo/administration/restricti

onpolicies/default.asp

Let me ask you, do you know if wildcards such as * and ? Are allowed in
registry path rules as they are in folder path rules? From my testing they
are not.

Good day,

Chris Weber

"Graham Turner" <graham@nospam.ideadata.co.uk> wrote in message
news:UNK+GiBmKEO9Ew+6@mrt.mrt.com...
> Hi,
>
> I am trying to implement software restriction policies via group policy
> to enable individual applications dependant upon group membership. This
> has worked successfully for me during testing for various applications
> until I tried Office XP. All Group Policies are assigned to the Computer
> Configuration.
>
> If I set a file hash on Winword.exe then Word will still not load.
> If I set a file path to c:\Program Files\Microsoft
> Office\Office10\winword.exe then Word will load correctly.
>
> As a side note I also have the following restrictions set so that the
> operating system will work correctly :-)
>
> File Path c:\windows
> File Path c:\program files\common Files
>
> The following Designated File Types have been set :-
> .Com, .Cmd, .Exe, .Scr
>
> When Winword.exe fails to load there is no entry in the Event log as you
> would expect. Even enabling advanced logging
> (Hkey_local_machine\software\policies\Microsoft\Windows\Safer\CodeIdentif
> iers\Logfilename) is not reporting the restriction correctly.
>
> I have tried this implementation in two separate test labs with
> different configurations and hardware,and it is only the Office Suite
> that is failing. Applications such as Adobe Acrobat Reader 5, Wordpad,
> Windows Media Player can all be authorised by file hash successfully.
>
> Can anyone replicate file hashing failing against Office XP? Also is
> anyone else using Software Restriction Polices, there appears to be very
> little mentioned in Technet or from searching Deja.com
>
> Many Thanks
> --
> Graham Turner

Loading