hello, I am using Windows SErver 2008 R2, 64 bit. my problem is that I can not run .exe file when I'm logged in as non-administrator. Simply, nothing happens. I've turne off DEP and UAC. Also, I've turne off firewall -> same result. What else can I do? Greetings, Frenky

Hello, If you want to use Run-as option in windows server 2k8 & win7: Select application and press "Shift+ mouse right click button" it will prompt you run as different user option. Regards, Ravikumar P

I suggest you put this system in clean boot and try running exe files again - http://support.microsoft.com/kb/929135 Check if you have NTFS permissions to run those files (go to properties and security tab) and also look at group policies using rsop.msc to make sure you're not blocking non-admins users from installing applications. look here - http://www.thewindowsclub.com/how-to-prevent-users-from-installing-programs-in-windows-7Sachin Gadhave MCP, MCSA, MCTS

Quote: Hello, If you want to use Run-as option in windows server 2k8 & win7: Select application and press "Shift+ mouse right click button" it will prompt you run as different user option. -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Thanks for answer. Yes, I know that - and it runs if I do this. But, my users will not have admin privileges. So, they must be able to run this .exe file with non-admin privileges.

Hello Antoni, By using SW restriction policy you might get the solution to your query. So, please go through this article once http://technet.microsoft.com/en-us/library/bb457006.aspx or else if you have SMS2003/SCCM2007 server at your place, you can install any software with user rights by the concept of application deployment.Regards, Ravikumar P

I suggest you put this system in clean boot and try running exe files again - http://support.microsoft.com/kb/929135 and also look at group policies using rsop.msc to make sure you're not blocking non-admins users from installing applications. look here - http://www.thewindowsclub.com/how-to-prevent-users-from-installing-programs-in-windows-7 Sachin Gadhave MCP, MCSA, MCTS Thanks for answer. First, I followed point 1 and 2 from http://www.thewindowsclub.com/how-to-prevent-users-from-installing-programs-in-windows-7 points 3 and 4 I wasn't doing because they are preventing some windows programs to run or preventing programs from being installed - but I want to run a program. I've also put computer in clean boot, just like this article says: http://support.microsoft.com/kb/929135 Check if you have NTFS permissions to run those files (go to properties and security tab) - I've also done this, but I don't know what feature to change? My .EXE file still doesn't run.

I suggest you put this system in clean boot and try running exe files again - http://support.microsoft.com/kb/929135 and also look at group policies using rsop.msc to make sure you're not blocking non-admins users from installing applications. look here - http://www.thewindowsclub.com/how-to-prevent-users-from-installing-programs-in-windows-7 Sachin Gadhave MCP, MCSA, MCTS Thanks for answer. First, I followed point 1 and 2 from http://www.thewindowsclub.com/how-to-prevent-users-from-installing-programs-in-windows-7 points 3 and 4 I wasn't doing because they are preventing some windows programs to run or preventing programs from being installed - but I want to run a program. I've also put computer in clean boot, just like this article says: http://support.microsoft.com/kb/929135 Check if you have NTFS permissions to run those files (go to properties and security tab) - I've also done this, but I don't know what feature to change? My .EXE file still doesn't run. The first article in point 1 and 2 says that if the situation gets better, then you can re-enable some services. But, problem in my case is that situation stayed the same.

I thought you cannot install ANY applications on the server, is it only ONE exe that you cannot run or all? Please clarify.Sachin Gadhave MCP, MCSA, MCTS

Here's the situation: I've created .exe which my users will use. Each user will have his own .exe -> this exe connects to database and is doing a lot of other things. It's made in Visual Basic, .net framework 3.5. Since this .exe wasn't running, I've tried another .exe, as simple as possible: I've created 'Hello World' in C# - and this doesn't run, either. It doesn't run if I am logged in as non-administrator (my users will be non-administrators - I can not let them change settings, delete system files and so on). But, If I log in as administrator, every .exe runs normally. And that's the root of the problem: run .exe file and be logged in as non-administrator.

Are you able to run it on another server with non admin rights? What if you add the non-admin user to the administrators group, does it work? Just for tresting. Also look at this app locking policy settings- http://www.windowsecurity.com/articles/Securing-Application-Execution-Microsoft-AppLocker.html Can you download a simple EXE and try to run it, if it works then you may want seek help on application coding here - http://social.msdn.microsoft.com/Forums/en-US/csharpgeneral Sachin Gadhave MCP, MCSA, MCTS

Are you able to run it on another server with non admin rights? What if you add the non-admin user to the administrators group, does it work? Just for tresting. Also look at this app locking policy settings- http://www.windowsecurity.com/articles/Securing-Application-Execution-Microsoft-AppLocker.html Can you download a simple EXE and try to run it, if it works then you may want seek help on application coding here - http://social.msdn.microsoft.com/Forums/en-US/csharpgeneral Sachin Gadhave MCP, MCSA, MCTS If I add non-admin user to administrators group, it doesn't work either. If I run .exe as administrator (and type admin password), then it works. I've got recommendation from some other forum to shut down AppLocker and I did it - I completely stopped the service. Before that, I've deleted all the rules and force update through console. Then I disabled the AppLocker service. This is really strange and I don't understand it... are there logs or something that I can look in what's blocking execution of my .exe files?

Hi, Thank you for the post. Please run powershell command below to verify if the effective policy on the client computer is empty: import-module AppLocker Get-AppLockerPolicy Effective -XML AppLocker rules still enforced after the service is stopped but Applocker effective policy not empty http://technet.microsoft.com/en-us/library/hh310286(WS.10).aspx If there are more inquiries on this issue, please feel free to let us know. RegardsRick Tan TechNet Community Support

Hi, Thank you for the post. Please run powershell command below to verify if the effective policy on the client computer is empty: import-module AppLocker Get-AppLockerPolicy Effective -XML AppLocker rules still enforced after the service is stopped but Applocker effective policy not empty http://technet.microsoft.com/en-us/library/hh310286(WS.10).aspx If there are more inquiries on this issue, please feel free to let us know. RegardsRick Tan TechNet Community Support

Hi, Thank you for the post. Please run powershell command below to verify if the effective policy on the client computer is empty: import-module AppLocker Get-AppLockerPolicy Effective -XML AppLocker rules still enforced after the service is stopped but Applocker effective policy not empty http://technet.microsoft.com/en-us/library/hh310286(WS.10).aspx If there are more inquiries on this issue, please feel free to let us know. Regards Rick Tan TechNet Community Support Thanks for answer. I've run your command and receive reply: PS C:\Users\Administrator> import-module AppLocker PS C:\Users\Administrator> Get-AppLockerPolicy -Effective -XML <AppLockerPolicy Version="1"><RuleCollection Type="Dll" EnforcementMode="NotCon figured" /><RuleCollection Type="Exe" EnforcementMode="Enabled" /><RuleCollecti on Type="Msi" EnforcementMode="Enabled" /><RuleCollection Type="Script" Enforce mentMode="Enabled" /></AppLockerPolicy> PS C:\Users\Administrator> I'm not sure if this means something or is it connected to my problem?

Hi, Your post show the Applocker Policy is empty, so let's try other way to resolve your issue. To the exe file NTFS permission, please grant the full permission to the domain users or create the exe file by users own. Moreover, check and analyze any event logs when you run the exe file. RegardsRick Tan TechNet Community Support

Hi, Your post show the Applocker Policy is empty, so let's try other way to resolve your issue. To the exe file NTFS permission, please grant the full permission to the domain users or create the exe file by users own. Moreover, check and analyze any event logs when you run the exe file. Regards Rick Tan TechNet Community Support Thanks for response. I've set full control for that .exe and particular user and I also set full control for parent folder. Exe doesn't run (none of exe's, not just this one) if I am logged as non-administrator. What log should I look into? There are so many of them ))

Hi, Can we capture two process monitor log, one if for the administrator account to run this test .exe, another is user account to run it. Then we can compare them, and find out the user stops at which part. Please download Process Monitor from the following link, and extract it from the zip file. http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx Meanwhile, i noticed that this issue still occurs even if we add the user to administrator group, that means we need to consider if the user account has problem. please try to give the user the full permission for all the registry keys. Please test if the affected test exe file can run on other server via normal user. Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.