RDP & Path Rules

[jertsy]

Hi

 

I am new to software restriction policies and I have setup path rules to disallow the default file type, .exe, .bat & many others listed. All is good in school, users can access all docs and not run .exe's. But via the RDP gateway they get 'your system administrator has blocked this program, for more information contact your system administrator'

Its as if the system seeing it as a file type it should block. I have setup the Software restrictions on the user portion of the GPO, maybe I should have done it on the computer portion of the GPO instead but I thought that might block admins from running .exe etc... when logged onto the PC's.

 

Any help greatly appreciated.

[localzuk]

Not entirely clear - are you saying the entire session fails to launch, or that .doc files etc... are being blocked?

 

The only thing I'm aware of is that when you login in an RDS server, the file "USRLOGON.CMD" is ran from the System32 folder, so if you restrict down those sorts of files, you need to allow that one to run.

[jertsy]

Not entirely clear - are you saying the entire session fails to launch, or that .doc files etc... are being blocked?

 

The only thing I'm aware of is that when you login in an RDS server, the file "USRLOGON.CMD" is ran from the System32 folder, so if you restrict down those sorts of files, you need to allow that one to run.

 

Its .doc files etc... that are being blocked, they can log into the rdp session fine, they get all drive maps etc fine.

I will give that a try it sounds like a candidate for the issue.

thanks localzuk

[jertsy]

Fixed it, it was daft really, I just needed to set the path C:\program files (x86)\ to unrestricted. 32 bit office is the one published on the RDP server, so it fell outside of the default path allow stuff.

 

Cheers