AppLocker - Microsoft Whiteboard

[T_Lister]

Hello forum,

 

We have been asked to look at getting Microsoft Whiteboard running for trial purposes. AppLocker is not blocking it, yet when I try to run the program it crashes as soon as it opens. If I move the PC out of the GPO tree completely and force an update, it runs. I put the PC back in the GPO group it is supposed to be, it runs. It is as though it has a lock set on it, I do not recall if we originally had it blocked. But the only way to stop it crashing is as mentioned to move it out of the GPO tree completely.

 

I've exported the AppLocker local and server GPO as XML to check the rules. Local contains none, the server shows it as allow and RSOP doesn't show the machine as pulling any. I've also tried 'Reset' the app in Settings on the individual machine. Still it does not run.

 

Any thoughts?

[CHiLL]

AppLocker should present a blue modern/metro style access denied message when you try and run an app that's blocked by AppLocker.

 

I would try isolating the specific GPO that is causing it to stop running by creating a new OU with blocked inheritance and adding each individual GPO individually until you find the culprit. Then go from there. I've stumbled into that hole a few times, absolutely sure it was a specific GPO causing issues when it wasn't.

[T_Lister]

AppLocker should present a blue modern/metro style access denied message when you try and run an app that's blocked by AppLocker.

 

I would try isolating the specific GPO that is causing it to stop running by creating a new OU with blocked inheritance and adding each individual GPO individually until you find the culprit. Then go from there. I've stumbled into that hole a few times, absolutely sure it was a specific GPO causing issues when it wasn't.

 

So it turned out it is our WSUS GPO. The setting 'Do not connect to any Windows Update Internet locations' is preventing the first run. Presumably as it is an app that loads into the start menu after you login? Turn the GPO back on after you've first run the app, no issues.

 

Cheers, CHiLL.

[free780]

Hopefully it won't in place upgrade Windows 10. Make sure you have Dual Scan disabled.

[CHiLL]

So it turned out it is our WSUS GPO. The setting 'Do not connect to any Windows Update Internet locations' is preventing the first run. Presumably as it is an app that loads into the start menu after you login? Turn the GPO back on after you've first run the app, no issues.

 

Cheers, CHiLL.

We have Do not connect to any Windows Update Internet Locations enabled and that setting has been enabled for many years. When I was testing Microsoft Whiteboard a couple of years ago, I'm pretty sure that it worked without having to change that setting.

 

How are you deploying Microsoft Whiteboard? Is it built into your version of Windows 10 or are you deploying the AppX package? When I was testing, it wasn't in the OS, it was a AppX package.

[free780]

If via the store or SCCM you need to have that setting disabled.

[sted]

is there an appx to download/deploy like minecraft or do i need intune/sccm to deploy it as i cant find one if there is

[CHiLL]

I never did deploy Microsoft Whiteboard site-wide because staff had no use for it, since they have SMART Notebook. However during testing, I deployed it as a store app via SCCM....but I still had Do not connect to any Windows Update Internet Locations configured.

 

is there an appx to download/deploy like minecraft or do i need intune/sccm to deploy it as i cant find one if there is

I believe you can get the AppX package and deploy it via a Powershell script, however that isn't the route I took and don't know where those files can be located.

 

Edit: Looking back at my SCCM deployment, I can see AppX packages in my Sources folder (specifically for version 18.1009.2209.0);

• Microsoft.NET.Native.Framework.1.7_1.7.25531.0_x64__8wekyb3d8bbwe.Appx
  
• Microsoft.NET.Native.Framework.1.7_1.7.25531.0_x86__8wekyb3d8bbwe.Appx
  
• Microsoft.NET.Native.Runtime.1.7_1.7.25531.0_x64__8wekyb3d8bbwe.Appx
  
• Microsoft.NET.Native.Runtime.1.7_1.7.25531.0_x86__8wekyb3d8bbwe.Appx
  
• Microsoft.VCLibs.140.00_14.0.26706.0_x64__8wekyb3d8bbwe.Appx
  
• Microsoft.VCLibs.140.00_14.0.26706.0_x86__8wekyb3d8bbwe.Appx
  
• Microsoft.Whiteboard_18.11009.2209.0_x64__8wekyb3d8bbwe.Appx
  
• Microsoft.Whiteboard_18.11009.2209.0_x86__8wekyb3d8bbwe.Appx
  

If I remember correctly, you needed all of the above files for it to deploy, or at least all the 32-bit files for a 32-bit deployment and all the 64-bit files for a 64-bit deployment. I just had them all in the same location and two Deployment Types in my Application within SCCM. SCCM treats this application as a Windows app package deployment, rather than a MSI/Script deployment.

Edited January 21, 2020 by CHiLL

[tri_94]

is there an appx to download/deploy like minecraft or do i need intune/sccm to deploy it as i cant find one if there is

 

Just wondering if you got anywhere with this?

 

Thanks