Software Restriction Policy - Disallow all but exceptions

[apeo]

Its likely this has bee discussed before it I couldnt find anything. Anyway if you set Disallowed as the default Security Lever under User Config, is it possible to set exceptions?

 

I thought I could just set path rules in Additional Rules and it would pick these up as exception but its still blocking the programs in the paths I've given unrestricted. What am i missing?

[Cache]

Have you unrestricted the .lnk extension? If not, any shortcuts will all be restricted too.

[apeo]

Yes. I know shortcuts are working because office shortcuts are working but no other program shortcuts are.

 

EDIT: Is it anything to do with the policy being applied to the user instead of the machine? i.e. is it not meant to work via user policy?

Edited September 15, 2011 by apeo

[apeo]

Ok I'm totally confused now. I found out that if i went into the directory where the app is and ran it, it loaded the app but if I tried using the shortcut it won't work. Whats even more confusing is that I then tested other apps, which didnt have a path rule exception, they worked too so it seems the only thing Software Restriction is doing is blocking shortcuts.

 

Any ideas anyone? Does anyone have Software Restriction working based on Users?