Hi, We has implemented Software Restriction Policies on our Windows XP SP2 build since last year ago before started using window7, but currently we are now having problems with the functioning of the SCCM Client after SCCM OSD window 7 migration. What the Software Restriction Policies does is prevent certain extensions from running such as EXE, COMs and VBS. They do have exclusion folders but I am not sure which folders should be excluded besides the standard Windows\System32\CCM folder for SCCM to function. I was wondering if there is any information about what access (Registry/File/Folder/Executable) the SCCM Client Install needs in order to run correctly.We are now unable to launch the Run Advertised Programs,Program Download Monitor and Configuration Manager due to the software restriction policy. I have checked the Client Installation Logs which all report a successful install during SCCM OSD but when running the client it was blocked by the software restriction policy. I already added Software Restriction Policie Settings as below :- %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%\*.exe %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%\System32\*.exe %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%\System32\ccm %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%\System32\ccmsetup %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% C:\Windows\System32\CCM C:\Windows\System32\ccmsetup But still unable to execute the Run Advertised program,Program Download Monitor and Configuration Manager. There is no problem with SCCM client execution if i move out that testing machine from the software restriction policy OU. Is it any thing i still need to add into the software restriction policy in order to execute the SCCM client. Any ideas would be welcome. Thanks and regards, Leong Leong

Hi, I donot have SCCM client installed on my computer. So I donot know its execute path. I suggest posting at http://social.technet.microsoft.com/Forums/en-US/category/configurationmanager for help. Juke Chou TechNet Community Support

Hi, I donot have SCCM client installed on my computer. So I donot know its execute path. I suggest posting at http://social.technet.microsoft.com/Forums/en-US/category/configurationmanager for help. Juke Chou TechNet Community Support

Hi Juke, I posted at configuration manager forum since Monday also can't get any solution. http://social.technet.microsoft.com/Forums/en-US/configmgrsetup/thread/23d47f1a-aacd-4246-b1d5-11aef8510b3d Regards, LeongLeong

Hi Juke, I posted at configuration manager forum since Monday also can't get any solution. http://social.technet.microsoft.com/Forums/en-US/configmgrsetup/thread/23d47f1a-aacd-4246-b1d5-11aef8510b3d Regards, LeongLeong