T_Lister Posted January 20, 2020 Posted January 20, 2020 Hello forum, We have been asked to look at getting Microsoft Whiteboard running for trial purposes. AppLocker is not blocking it, yet when I try to run the program it crashes as soon as it opens. If I move the PC out of the GPO tree completely and force an update, it runs. I put the PC back in the GPO group it is supposed to be, it runs. It is as though it has a lock set on it, I do not recall if we originally had it blocked. But the only way to stop it crashing is as mentioned to move it out of the GPO tree completely. I've exported the AppLocker local and server GPO as XML to check the rules. Local contains none, the server shows it as allow and RSOP doesn't show the machine as pulling any. I've also tried 'Reset' the app in Settings on the individual machine. Still it does not run. Any thoughts?
CHiLL Posted January 20, 2020 Posted January 20, 2020 AppLocker should present a blue modern/metro style access denied message when you try and run an app that's blocked by AppLocker. I would try isolating the specific GPO that is causing it to stop running by creating a new OU with blocked inheritance and adding each individual GPO individually until you find the culprit. Then go from there. I've stumbled into that hole a few times, absolutely sure it was a specific GPO causing issues when it wasn't. 1
T_Lister Posted January 20, 2020 Author Posted January 20, 2020 AppLocker should present a blue modern/metro style access denied message when you try and run an app that's blocked by AppLocker. I would try isolating the specific GPO that is causing it to stop running by creating a new OU with blocked inheritance and adding each individual GPO individually until you find the culprit. Then go from there. I've stumbled into that hole a few times, absolutely sure it was a specific GPO causing issues when it wasn't. So it turned out it is our WSUS GPO. The setting 'Do not connect to any Windows Update Internet locations' is preventing the first run. Presumably as it is an app that loads into the start menu after you login? Turn the GPO back on after you've first run the app, no issues. Cheers, CHiLL.
free780 Posted January 20, 2020 Posted January 20, 2020 Hopefully it won't in place upgrade Windows 10. Make sure you have Dual Scan disabled.
CHiLL Posted January 21, 2020 Posted January 21, 2020 So it turned out it is our WSUS GPO. The setting 'Do not connect to any Windows Update Internet locations' is preventing the first run. Presumably as it is an app that loads into the start menu after you login? Turn the GPO back on after you've first run the app, no issues. Cheers, CHiLL. We have Do not connect to any Windows Update Internet Locations enabled and that setting has been enabled for many years. When I was testing Microsoft Whiteboard a couple of years ago, I'm pretty sure that it worked without having to change that setting. How are you deploying Microsoft Whiteboard? Is it built into your version of Windows 10 or are you deploying the AppX package? When I was testing, it wasn't in the OS, it was a AppX package.
free780 Posted January 21, 2020 Posted January 21, 2020 If via the store or SCCM you need to have that setting disabled.
sted Posted January 21, 2020 Posted January 21, 2020 is there an appx to download/deploy like minecraft or do i need intune/sccm to deploy it as i cant find one if there is
CHiLL Posted January 21, 2020 Posted January 21, 2020 (edited) I never did deploy Microsoft Whiteboard site-wide because staff had no use for it, since they have SMART Notebook. However during testing, I deployed it as a store app via SCCM....but I still had Do not connect to any Windows Update Internet Locations configured. is there an appx to download/deploy like minecraft or do i need intune/sccm to deploy it as i cant find one if there is I believe you can get the AppX package and deploy it via a Powershell script, however that isn't the route I took and don't know where those files can be located. Edit: Looking back at my SCCM deployment, I can see AppX packages in my Sources folder (specifically for version 18.1009.2209.0); Microsoft.NET.Native.Framework.1.7_1.7.25531.0_x64__8wekyb3d8bbwe.Appx Microsoft.NET.Native.Framework.1.7_1.7.25531.0_x86__8wekyb3d8bbwe.Appx Microsoft.NET.Native.Runtime.1.7_1.7.25531.0_x64__8wekyb3d8bbwe.Appx Microsoft.NET.Native.Runtime.1.7_1.7.25531.0_x86__8wekyb3d8bbwe.Appx Microsoft.VCLibs.140.00_14.0.26706.0_x64__8wekyb3d8bbwe.Appx Microsoft.VCLibs.140.00_14.0.26706.0_x86__8wekyb3d8bbwe.Appx Microsoft.Whiteboard_18.11009.2209.0_x64__8wekyb3d8bbwe.Appx Microsoft.Whiteboard_18.11009.2209.0_x86__8wekyb3d8bbwe.Appx If I remember correctly, you needed all of the above files for it to deploy, or at least all the 32-bit files for a 32-bit deployment and all the 64-bit files for a 64-bit deployment. I just had them all in the same location and two Deployment Types in my Application within SCCM. SCCM treats this application as a Windows app package deployment, rather than a MSI/Script deployment. Edited January 21, 2020 by CHiLL
tri_94 Posted February 2, 2021 Posted February 2, 2021 is there an appx to download/deploy like minecraft or do i need intune/sccm to deploy it as i cant find one if there is Just wondering if you got anywhere with this? Thanks
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now