Weird issue with one workstation

[Chuckster]

I have a workstation within a single OU that has other 14 workstations within in it. The problem users are accounting is the fact that they aren't able to load any executebles to programs such as Word, Excel, etc. Software restriction policy is in place at User configuration level and these very same users do not exhibit the same symptoms on any of the other workstations within that OU.

 

I'm a bit confused because if users are able to go about doing their own thing on other workstations, how comes this one workstation won't play nicely? Any suggestions?

[jamesb]

What software restriction policies are in place at the user level?

 

Is there anything on that system's AD object which prevents it from reading the policy?

[Chuckster]

There's a blanket block on exes, vbs, etc. You know, the standard stuff. What's been permitted is:

 

%ProgramFiles%\*

%LogonServer%\SysVol\*

%WinDir%\system32\cscript.exe

%WinDir%\system32\wscript.exe

 

 

There isn't anything else being inherited by the OU apart from the software installation stuff.

 

I've also run GP Modeling and all appears to be normal. Even rsop.msc throws up nothing unusual.

[Michael]

If you logon to the problem machine and a working machine as a domain administrator, then click Start > Run and type:

 

gpupdate /force

 

Reboot both machines, then logon as standard users. What happens?

[Chuckster]

Performing gpupdate /force from both domain controllers and on the workstation itself does nothing. Even a reboot of the PDC last night didn't do it either.

 

I even rebuilt the offending workstation last night and it's still doing it.

 

In addition to the above, I also moved the workstation into a different OU but that has had no effect.