Re: Software restriction policies and Windows XP

Does rsop.msc show that SRP are being applied and by the Group Policy you
expect? For hash rules you need to make sure that the hash is the same on
the client computer as you defined. You could also try a path rule for
word.exe as a test to see if that works or not. When tweaking SRP check the
application log on the client computer as often a SRP event will be recorded
that can help you troubleshoot why SRP does not work as expected. Also keep
in mind that shortcuts are also restricted by SRP. So if you are trying to
start word.exe via a desktop or menu shortcut it could be that the shortcut
itself is restricted. You can also try executing word.exe directly to see if
that is the case.

Steve


"Soheil" <Soheil@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F2AB0C2C-2487-437D-9306-58C65572D494@xxxxxxxxxxxxxxxx
Hi,

default security level is "Disallowed" by User Configuration. By
"Additinal
Rules" I created a new Hash Rule.

I did link that GPO to an OU with my users. When a user is logged on
Windows
XP Prof SP2, "Disallowed"

What works? "Disallowed" Software works. Nice!
What not works? The Hash Rule which should allowes starting of "word.exe".

I had a look on WinXP Prof. by gpedit.msc. If you look by "Local Computer
Policy" you'll find by "User configuration", "Windows Settings", "Security
Settings" no folder named "Software Restriction policies" (regardless of
logged on localy or not).

But if run rsop.msc on that WinXP Prof, the is a "Software Restrictin
Policies" folder.

Why the restriction policies works half? And why rsop shows not
"Disallowed"
as default level? Does have this to do with missing ADM Files or
permissions!?

Thanks for any help.
Soheil




.

Relevant Pages

  • Re: how can i block apps
    ... that you quoted referred to enterprise management. ... However **WARNING** SRP can cause you computer not to start if not ... Note that a hash rule will apply to ... >> to authorize the shortcut. ...
    (comp.security.firewalls)
  • Re: Software restriction policies and Windows XP
    ... I have never tried configuring both user and computer configuration for SRP ... GPO also to computer account, ... Rules" I created a new Hash Rule. ...
    (microsoft.public.windowsxp.security_admin)
  • Prblm: Cant get Software Restrictions Policies to work as expected
    ... I'm administering a number of computers at a school and I use SRP ... Our default policy configuration is to disallow running of applications, ... I've studied the document "Using Software Restriction Policies to Protect ...
    (microsoft.public.win2000.security)
  • Prblm: Cant get Software Restrictions Policies to work as expected
    ... I'm administering a number of computers at a school and I use SRP ... Our default policy configuration is to disallow running of applications, ... I've studied the document "Using Software Restriction Policies to Protect ...
    (microsoft.public.win2000.group_policy)
  • Prblm: Cant get Software Restrictions Policies to work as expected
    ... I'm administering a number of computers at a school and I use SRP ... Our default policy configuration is to disallow running of applications, ... I've studied the document "Using Software Restriction Policies to Protect ...
    (microsoft.public.windowsxp.security_admin)