Applocker Expected Behaviour?

[jertsy]

I am doing some testing and I have found that after applying and removing Applocker polices to a windows 7 PC it then ignores SRP policies, my SRP policies are set on the user portion of a separate GPO but no matter what I try the PC's that had Applocker previously deployed ignores them. I have done RSOP and the SRP policy is applying, I have stopped the appidentity service and unlinked the Applocker GPO. I know Applocker ignores SRP polices when in force but I would have thought once removed the it should fall back to seeing SRP. I can’t find anything online saying that this is expected behaviour so I just wondered if anyone has also come across this.

 

Cheers

[Cache]

Might not help, but does it still occur if you disable the Applocker service and reboot? I wonder if it's the actual Service that is causing it to ignore it rather than the presence of policies?

[jertsy]

Might not help, but does it still occur if you disable the Applocker service and reboot? I wonder if it's the actual Service that is causing it to ignore it rather than the presence of policies?

 

Yeah I tried that as thought the same but it does not seem to make any difference. I suspect its something remaining in the registry and I can see some registry keys under HKCU that if modified might make a difference but I have managed to test another way so I'm going to leave this for now, but it may be of help to know its happened here if anyone comes accross this in future.