Hello, I am preparing to take the MCTS exam on Windows 7 and I have a question about the software restriction policy. I opened the control panel, clicked on administrative tools, and then clicked on Local Security Policy. I then created an additional hash rule to disallow the notepad.exe program. I then click on the Software Restriction Policy folder on the left hand side of the window and clicked on Enforcement. I then clicked on the tab to apply rules to all users except local administrators. I then attempted to open the notepad.exe program and received a message stating the program was blocked by group policy. I attempted to open the program using the only user account on the computer which belongs to the administrators group. I ran the net user command and my user account belongs to the administrators group. Running the gpresult command says my user account belongs to just about every group available. Does anyone know how to apply the disallow rule to all users except users in the administrators group? I read somewhere that Applocker rules supercede local group policy rules but I did indicate that I selected the apply rules to all user except local administrators.