Intermittent Software Restriction Polices

[william_tropico]

Hello All,

 

I have a very weird and equally infuriating issue with software restriction polices. These have been in place for ages and for the most part have not caused any issues. Unfortunately over the past few months this has started to change.

 

A staff member will log in and anyapplication they load will get "This app has been blocked by your system administrator". If they log out and back in it will load as normal and they will be able to open applications which are in the allow list. Recently it has been happening more and more and now it's causing issues when students log in.

 

 

It's very hard to pin point where and when it will happen as it happens on different computers to different users at different times. Very hard to troubleshoot.

 

• This will generally happen for the first user logging into the pc after it's turned on
  
• Logging off / back in will generally resolve this
  
• on some users they have to log out / in 2 or 3 times
  
• this happens on freshly re-imaged machines as well as ones which were imaged over 18 months ago
  

 

It's become such a common issue that an automated rule has been set up on our helpdesk system to respond to end users. I've been pulling my hair out over this (well what is left of it anyway) as I cant seem to find out what is causing it. Even our third party support looked and said "GPOs look fine".

 

I'm just wondering if anyone out there has had this issue before or could at least make some suggestions?

Edited December 1, 2021 by william_tropico
Spelling

[jthompson]

Is the SRP applied to computers or to users? The inconsistency brings to mind two different policies getting applied, one for the computer, one for the user, such that the winner will be down to whether a user policy was processed last, or a computer policy. I've read about user-scoped SRP policies being unreliable.

 

I'd want to rule out a second SRP getting applied, perhaps one in a mode of deny by default, with no rules added.