Sotware restriction policy problem
I have some software restriction policies setup to prevent our students running .executables from Pen drives, their home areas etc, and it is working well so far. This policy is set as part of a GPO at the top of our Pupil OU, we have several OU's underneath for different students in year groups etc. I have done this by adding in %HOMESHARE% as a path rule on the software restriction policy for students. This policy is not enforced, and does not have "no overide" in its config.
As part of our Y13's ICT lessons, I have setup a sub OU of the Y13 cohort OU, called VB Users.
These users are using visual studio, and unfortunately, they need to use run exe files from the following directory:
H:\Documents\Visual Studio 2010\Projects\....
If I add in either
%HOMESHARE%\Documents\Visual Studio 2010\Projects\
%HOMESHARE%\Documents\Visual Studio 2010\Projects\*.exe
%HOMESHARE%\Documents\Visual Studio 2010\Projects\*.*
H:\Documents\Visual Studio 2010\Projects\
H:\Documents\Visual Studio 2010\Projects\*.*
H:\Documents\Visual Studio 2010\Projects\*.exe
to a GPO in the sub-OU, all as unrestricted, the programs are still blocked in Visual Studio by the previous GPO, higher up the tree!
Some help as to where I am going wrong would be good please!