Software restriction policies

[DMcCoy]

I'm going to put some key words in here now to make sure any other poor sod trying to get OFFICE GENUINE ADVANTAGE to work.

 

There is an issue with Office Genuine advantage if you have the option enabled to manage the certificates for software restriction policies in group policy.

 

It is not logged, shown as blocked, spotted by filemon. There is a very brief mention of something similar to do with a code signing on the MS kb, although nothing specific to genuine advantage. I'm also not *using* this option, just have it so the certs are managed by domain admins.

 

The issue was this. Student logs in, opens office, starts a new document from the MS online templates at which point office says "NOOOOO This is an ILLEGAL copy of office you stealing oik"

 

Click to go to validation site, it says VALID!

 

So if you come across this issue, simply remove "Define these settings" in Trusted publishers under SRP.