Search the Community

Hey Guys, I recently set up an Software Restriction Policy through GPO on my domain with a default policy of deny. I have the path rules "%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir%" -unrestricted, and "%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% (x86)" -unrestricted, as well as some other specific directories as needed. In general the policy works properly. It blocks what it is supposed to, and the majority of programs in the Program Files folder work as they should. However random programs with in those directories do not run. For example: Description: Access to C:\Program Files\Conexant\SAII\SmartAudio.exe has been restricted by your Administrator by the default software restriction policy level. Is generated by the event viewer. As well as some others. Even adding that exact path as a path rule does not seem to resolve this issue. Can anybody provide any tips to get this working? Thanks! BTW: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% is also unrestricted, obviously.