Blocking Calculator app nightmare

[edubri]

Has anyone had any success with this? I've tried with Applocker and GP and it doesn't appear to block the calculator for our exam accounts : also in user config > admin templates I have calc.exe and calc blocked in group policy.

 

Other than uninstalling this Im running out of ideas

 

I've blocked C:\Program Files\WindowsApps\Microsoft.WindowsCalculator* and C:\Windows\System32\calc.exe

with a deny access for a student exams group using Applocker.

 

Im thinking about a regedit disable calculator maybe?

 

Spent most of today testing this with no joy - any advice would be great thanks cheers

 

B

[jessica]

We use ABTutor to block the calculator app as had no success with applocker

[edubri]

We use ABTutor to block the calculator app as had no success with applocker

 

Unfortunately we don't have AB tutor

[timbo343]

Has anyone had any success with this? I've tried with Applocker and GP and it doesn't appear to block the calculator for our exam accounts : also in user config > admin templates I have calc.exe and calc blocked in group policy.

 

Other than uninstalling this Im running out of ideas

 

I've blocked C:\Program Files\WindowsApps\Microsoft.WindowsCalculator* and C:\Windows\System32\calc.exe

with a deny access for a student exams group using Applocker.

 

Im thinking about a regedit disable calculator maybe?

 

Spent most of today testing this with no joy - any advice would be great thanks cheers

 

B

 

You're going to have to take ownership of System32 where the exe lives before you can enforce permissions so take ownership and see what happens if you try to rename it to calc.exe.old?

Edited May 3, 2024 by timbo343

[jthompson]

We do it using a "Packaged app" rule in AppLocker.

 

Set the rule to deny for a suitable group.

 

Publisher:

CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

 

Package name:

Microsoft.WindowsCalculator

 

Package version:

10.2103.8.0 and above

 

We also have a similar rule for blocking the Clock app (alarms, timers, etc. that might fall foul of exam conditions).

Same publisher, but with a package name of "Microsoft.WindowsAlarms".

Version 10.2101.0.0 and above.

 

I'm assuming that these are still working as I won't have tested them for ages!

Edited May 3, 2024 by jthompson

[edubri]

We do it using a "Packaged app" rule in AppLocker.

 

Set the rule to deny for a suitable group.

 

Publisher:

CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

 

Package name:

Microsoft.WindowsCalculator

 

Package version:

10.2103.8.0 and above

 

We also have a similar rule for blocking the Clock app (alarms, timers, etc. that might fall foul of exam conditions).

Same publiser, but with a package name of "Microsoft.WindowsAlarms".

Version 10.2101.0.0 and above.

 

I'm assuming that these are still working as I won't have tested them for ages!

 

I also tried packaged app as well I've had no joy - its driven me up the wall today lol !

[jthompson]

I also tried packaged app as well I've had no joy - its driven me up the wall today lol !

 

I'd better make a note to test ours next week then!

 

EDIT:

Just tested now and the AppLocker rules are definitely working to block Calculator and Clock.

Edited May 3, 2024 by jthompson

[CrootUK]

Can confirm blocking calculator with applocker package app rules, works fine..

 

Do you have package app rules enabled on the properties tab of applocker config?

 

Useful to also use to block all apps apart from microsoft signed ones for students due to the store not always instantly blocking and students trying their luck with VPN apps.

Edited May 4, 2024 by CrootUK

[abtutor1]

Hey Jessica, its good to know we are supporting you!

 

- - - Updated - - -

 

Do get in touch for a trial to experience!

[KK20]

We also use applocker as a packaged app on deny without issue. I have the version as * though - the packagename isnt ambiguous so version is irrelevant to me. As per a previous poster, ensure that you havent set applocker to "audit" mode too, you might have been testing. Edited June 18, 2024 by KK20