+ Post New Thread
Results 1 to 14 of 14
Windows Thread, Software restriction policy, half working? in Technical; Hi A few days ago we made a software restriction policy in a separate OU and the policy we applied ...
  1. #1

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,028
    Thank Post
    887
    Thanked 1,723 Times in 1,488 Posts
    Blog Entries
    12
    Rep Power
    453

    Software restriction policy, half working?

    Hi

    A few days ago we made a software restriction policy in a separate OU and the policy we applied on that OU was a restriction so the user cannot use outlook. So basically we drag the people who have been banned into that OU and then the e-mail program is blocked. Sounds simple enough?

    Well it works on some machine but not on others! Its weird depending on were you logon it may or may not work. Does anyone have any ideas why?

    Z

  2. #2

    Join Date
    Mar 2007
    Posts
    307
    Thank Post
    3
    Thanked 9 Times in 8 Posts
    Rep Power
    17

    Re: Software restriction policy, half working?

    Have you got loopback on some machines? Could be overiding your restriction policy.

  3. #3

    bossman's Avatar
    Join Date
    Nov 2005
    Location
    England
    Posts
    3,940
    Thank Post
    1,197
    Thanked 1,068 Times in 759 Posts
    Rep Power
    330

    Re: Software restriction policy, half working?

    Have you checked the GPOs above that OU maybe there is one which is filtering down from above.

  4. #4

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,028
    Thank Post
    887
    Thanked 1,723 Times in 1,488 Posts
    Blog Entries
    12
    Rep Power
    453

    Re: Software restriction policy, half working?

    @pallen how do you mean please?

    @bossman we have a test user when we log into the library there is no restriction but when we log into one of the ICT rooms with the same account it works.

    Z

  5. #5
    sahmeepee's Avatar
    Join Date
    Oct 2005
    Location
    Greater Manchester
    Posts
    795
    Thank Post
    20
    Thanked 70 Times in 42 Posts
    Rep Power
    34

    Re: Software restriction policy, half working?

    i would drop a copy of rsop.msc into the all users' start menu and run it to see what policies they're getting.

  6. #6

    Join Date
    Mar 2007
    Posts
    307
    Thank Post
    3
    Thanked 9 Times in 8 Posts
    Rep Power
    17

    Re: Software restriction policy, half working?

    Have you got your clients in seperate OUs? You can enable loopback on the computer settings so that you can specify user policies based on Computer names.

    To set user configuration per computer, follow these steps:
    1. In the Group Policy Microsoft Management Console (MMC), click Computer Configuration.
    2. Locate Administrative Templates, click System, click Group Policy, and then enable the Loopback Policy option.

    You might want to check to see if there are some settings which are overriding your restriction policies on the groups of computers where the restrictions aren't being applied.

  7. #7

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,028
    Thank Post
    887
    Thanked 1,723 Times in 1,488 Posts
    Blog Entries
    12
    Rep Power
    453

    Re: Software restriction policy, half working?

    @ pallen
    The thing is we don't want it per computer we want it so what ever computer they logon to it will take effect.

  8. #8

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,028
    Thank Post
    887
    Thanked 1,723 Times in 1,488 Posts
    Blog Entries
    12
    Rep Power
    453

    Re: Software restriction policy, half working?

    Bump

  9. #9

    Join Date
    Mar 2007
    Posts
    307
    Thank Post
    3
    Thanked 9 Times in 8 Posts
    Rep Power
    17

    Re: Software restriction policy, half working?

    Thats what I meant, is there an existing policy in place in the computer OU which is overriding the policy you are setting. By the sounds of it there isn't any policy based on computers so thats my suggestion out. :?

    On another thought, are they all the same version of outlook inc patches?

  10. #10
    sahmeepee's Avatar
    Join Date
    Oct 2005
    Location
    Greater Manchester
    Posts
    795
    Thank Post
    20
    Thanked 70 Times in 42 Posts
    Rep Power
    34

    Re: Software restriction policy, half working?

    Did you try running rsop.msc on the affected PC?

  11. #11

    Join Date
    Jul 2007
    Location
    Devon
    Posts
    233
    Thank Post
    8
    Thanked 9 Times in 8 Posts
    Rep Power
    16

    Re: Software restriction policy, half working?

    Can't you leave users in the same OU, but simply use the restriction of the policy to only apply to a group rather than Authenticated Users?

    I think having Loopbacks caused me some issues once, I was really lazy once and applied it to the top level of the domain... *coughs* (I'm not 100% sure why loopback is turned on at the moment...)

    GP Results sounds like a superplan, it'll tell you if the policy is denied amongst other things - which policy wins setting stuff etc. really useful

  12. #12

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,028
    Thank Post
    887
    Thanked 1,723 Times in 1,488 Posts
    Blog Entries
    12
    Rep Power
    453

    Re: Software restriction policy, half working?

    Quote Originally Posted by pallen
    On another thought, are they all the same version of outlook inc patches
    Spot on

    I had another go today and that what the problem was. I have gone round the images adding the slightly different versions I could find I have 4 Outlook2003 and 1 Outlook 2007 on the list.

    Is there a way to make is so it will block all Outlook 2003 versions? I doubt it though.

    Thank you!

    Z

  13. #13

    Join Date
    Mar 2007
    Posts
    307
    Thank Post
    3
    Thanked 9 Times in 8 Posts
    Rep Power
    17

    Re: Software restriction policy, half working?

    How are you applying the block? If your using the hash rule for the exe file, I think it is different for every version. Could you try blocking the path where it is run from? So you could block access to all the files in the outlook folder.

  14. #14

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,028
    Thank Post
    887
    Thanked 1,723 Times in 1,488 Posts
    Blog Entries
    12
    Rep Power
    453

    Re: Software restriction policy, half working?

    Yes we use a hash rule and you need a new one for each version

SHARE:
+ Post New Thread

Similar Threads

  1. Software Restriction Policy
    By cookie_monster in forum Windows
    Replies: 2
    Last Post: 27th November 2007, 12:54 PM
  2. CC3 Software Restriction Policy
    By cookie_monster in forum Network and Classroom Management
    Replies: 8
    Last Post: 12th June 2007, 10:28 AM
  3. Software Restriction Policy (w2k3) - path question
    By indiegirl in forum How do you do....it?
    Replies: 5
    Last Post: 19th October 2006, 05:05 PM
  4. Software Restriction Policy (w2k3) - path question
    By indiegirl in forum How do you do....it?
    Replies: 0
    Last Post: 19th October 2006, 10:11 AM
  5. GPo - Software Restriction Policy
    By Gatt in forum Wireless Networks
    Replies: 26
    Last Post: 23rd January 2006, 01:53 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •