software restriction policy with mapped drive

[KK20]

An odd one. I use GPO software restriction policy with default disallow. This has been working fine for me. However, I have installed some software that requires to be run from a mapped drive (installed on the server, mapped on the server). Not a problem thought me, simply roll out the mapped drive in the login script and add the network share to the software restriction policy as allow.

 

However, it wont run. I can create a shortcut to the share (\\myserver\myshare\mysoftware\myprogram.exe) and that runs the .exe at least.

 

I tried adding the drive letter that I map to software restriction policy but again no go.

 

The mapped drive is nothing special (and everything works just fine if I take out the software restriction policy) the share is nothing weird either - a plain \\myserver\myshare - same as I have for other mapped drives on the system (that I *dont* want executables running from so I deliberately left those out of the software restriction policy)

 

This share isnt on any DFS or such.

 

I must be missing something, any ideas?

 

edit: I am using windows server 2003, domain and no other issues.

[djm968]

Is the mapped drive hidden?

 

Some software (and in my experience this is usually garden shed sorry "Educational Software" that requires a mapped drive) and will not function correctly when run from a hidden mapped drive.

[KK20]

no, quite visible. I even did a gpupdate /force just in case but I know this was desperation as I only need a log off/back on again for any change in the software policy to take effect straight away.

[KK20]

sussed it.

 

I needed to use the FQDN in the software restriction policy.