Applocker denies some pupils access to their documents?

[chazzy2501]

I've recently setup applocker for the exam accounts but as it has to work on every computer that could possibly be used and can't be enabled on a user basis......

 

anyway, it seems ok but I have one pupil who get a "restricted access" to her documents folder.. (not the big blue disallowed, you'd with an applocker violation) I would have this as a one off but another pupil said it happened to them as well.

 

I'm getting a script error as well for all pupils but this does not seem to cause issues on the whole and I assume it is an old printer script.

 

I'm wondering what mechanism maps the users profile from active directory "we use w:" and how I've broken it.

Edited January 6, 2023 by chazzy2501

[Steve21]

The easiest thing is check event viewer

 

It’ll log the exact path and reason it’s blocked applocker

 

Could be a number of items, like you blocked scripts that map things, shortcuts, anwrong file in system32 like explorer etc

 

It’s under apps & services - Microsoft - windows - applocker and then the four types of applocker rules have their own logs

 

Steve

[chazzy2501]

dang, I was sure it was my recent changes but she'd simply run out of space. I've never seen this outcome though when this happens?

[Steve21]

Do you have anything setup like automated scripts/emails when it gets low that it might be flagging?

 

Still would advise event viewer for applocker all the answers lie there!

 

Steve

[chazzy2501]

cheers, I did go through the app locker event log, as I suspected it was an old VBS printer script for double mapping a printer. No other issues.

 

Running out of space doesn't usually stop access to their files, the event log show that it couldn't create certain directories (favourites, etc) I assume this led to the issue.

 

I did see that some of the apps I denied were trying to update (calculator, alarms), hope this isn't an issue going forward.