Is the Software restriction policies 'basic user' security level broken in Windows 7?
Hi, i cant seem to make sense of the 'Basic User' security level in Software Restriction Policies on Windows 7 Ultimate. Whenever i use 'Basic User' security level in software restriction policies instead of forcing a program to run in basic user mode
it just blocks access.
I have looked the problem up on google and in a few forums people are saying that 'Basic User' used to work in Vista but now it just equals 'denied access'. When I have looked this problem up on Technet i can not find an official explanation why this is
happening. All the books and videos i have seen do not mention anything about there being a problem with the 'Basic user' security level for Software Restriction Policies in Windows 7.
In all the tests i have done it just does not seem to work the way its described, all it seems to do is Restrict access with the "this program is blocked by group policy, please contact you system admin..etc" warning to whatever it is applied to.
-Thanks
== Update ==
I tried using software restriction polices on another computer using windows 7 ultimate.
- I opened Local Group Policy Editor > computer settings > Windows settings > Security settings > software restriction policy.
- Set the Security Levels (default security level) to 'basic user'
- Tested it out by running an executable that was on my desktop
The program ran ok.
- I then tried to run a program that would require admin rights to run (and was outside the windows folder and program files folder which are set to unrestricted by default rules)
That program was blocked. So the 'Basic User' Setting was working as it should.
- I then rebooted the computer and ran the same tests.
This time all the executables where blocked!
August 23rd, 2012 2:39pm
Hi,
You may refer to this.
http://technet.microsoft.com/en-us/itmanagement/ff765027.aspx
Kim Zhou
TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
August 27th, 2012 3:18am
Hi,
You may refer to this.
http://technet.microsoft.com/en-us/itmanagement/ff765027.aspx
Kim Zhou
TechNet Community Support
August 27th, 2012 3:23am
Hi , thanks for the link to the video but it only mentions the 'basic user' setting in passing and does not explain why when use the 'basic user' security level with either a default rule or a specific exception as soon as i reboot the computer it just blocks
all access to whatever it is applied to.
Free Windows Admin Tool Kit Click here and download it now
August 27th, 2012 5:27am
Hi , thanks for the link to the video but it only mentions the 'basic user' setting in passing and does not explain why when use the 'basic user' security level with either a default rule or a specific exception as soon as i reboot the computer it just blocks
all access to whatever it is applied to.
August 27th, 2012 5:31am
Hi,
You may refer to this.
http://technet.microsoft.com/en-us/itmanagement/ff765027.aspx
Kim Zhou
TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
August 27th, 2012 10:18am
Im surprised i cant find any answers to this problem on technet. I found this unanswered post about the same problem from 2009 http://social.technet.microsoft.com/Forums/en-US/w7itproappcompat/thread/8ff6e518-d735-4acd-9321-7418f6772957
August 28th, 2012 5:33pm
Im surprised i cant find any answers to this problem on technet. I found this unanswered post about the same problem from 2009 http://social.technet.microsoft.com/Forums/en-US/w7itproappcompat/thread/8ff6e518-d735-4acd-9321-7418f6772957
Free Windows Admin Tool Kit Click here and download it now
August 28th, 2012 5:37pm
Im surprised i cant find any answers to this problem on technet. I found this unanswered post about the same problem from 2009 http://social.technet.microsoft.com/Forums/en-US/w7itproappcompat/thread/8ff6e518-d735-4acd-9321-7418f6772957
August 29th, 2012 12:33am
Yes it is broken, only block or allow are still supported.
Free Windows Admin Tool Kit Click here and download it now
October 6th, 2012 9:53am