You are not allowed to run....
Hi everybody,
i have a small but very annoying problem with some of my GPO Settings.
I can not open the Mouse or Regional and Language Settings from the Control Panel. Or better i can not open any application that is using the rundll32.exe. The Problem occurred after a migration from Windows XP to Windows 7 the first time. One of my colleagues
is a lefty and she linke to change the mouse buttons, but it was not possible.
I checked the problem with some different tools like filemon or process explorer on a system without GPO settings. If you cklick on the Mouse Icon, Windows will open the rundll32.exe with the following parameter:
rundll32.exe shell32.dll,Control_RunDLL main.cpl @0
If i use a Client with my running GPO i get the error message:
"This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator.
*grrrr* I'am the operator...
We only allowed a small set of applications on our Windows 7 Clients. But i added all *.exe to the policy that i need.
Did anybody know this problem? Is there any workaround or solution.
Facts:
Client OS windows 7
Domain Controller: 2003, 2008, 2008R2
Settings in GPO for User:
Control Panel\Show only specified Control Panel Icons
Add:
Mouse, Display, Keyboard, Power Options, Region and Language
System\Run only specified Windows applications: Enabled
Add:
rundll32.exe
control.exe
and some other
I hope that anybody have some informations for, because i'm running crazy with this prob.
Best regards, Sebastian
July 30th, 2010 5:19pm
Hi Guys,
no idea?
Best regards, Sebastian
Free Windows Admin Tool Kit Click here and download it now
August 2nd, 2010 10:36am
Hi,
How did you add the Mouse, Display, Keyboard, Power Options and Region and Language to the GPO? As I know, “Show only specified Control Panel Icons” in
Windows 7 is a little different from in Windows XP.
In Windows XP or Windows Server 2003, you need to type the module name (e.g. “timedate.cpl”), or the CPL file contains multiple applets.
In Windows 7, you need to enter the Control Panel items’ canonical name (e.g. “Microsoft.Mouse”).
Thus to customize the “Show only specified Control Panel Icons” GPO for Windows 7, please configure this GPO on Windows Server 2008 R2 machine and enforce
it to Windows 7 clients using the canonical name:
Mirosoft.Mouse
Microsoft.Display
Microsoft.Keyboard
Microsoft.PowerOptions
Microsoft.RegionAndLanguage
For a complete list of Control Panel item canonical names, see
Canonical Names of Control Panel Items.
Best Regards
Dale
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”
August 6th, 2010 10:06am
Hey Dale,
thanks for your answer. I'll configure my GPOs and run the test tomorrow.
I don't use the canonical names, only Mous or Keyboard. I'll hope that this will be the solution.
I'll response tomorrow
Best Regards,
Sebastian
EDIT: *ogmpf* i configured the control panel icons on a Server 2008... On the R2 is the correct example if you configure the policys. Let's go forward. Waiting for tomorrow...
Free Windows Admin Tool Kit Click here and download it now
August 6th, 2010 7:40pm
Hi @ all,
it is not working... same problem :(
August 7th, 2010 5:34pm
Any Geek with an brilliant Idea in the house? Otherwise i have to open a Ticket by MS
The Problem will start if i use the GPO "Run only specified Windows applications "
We have allowed all *.exe files we need. Especially control.exe and rundll32.exe
Best Regards, Sebastian
Free Windows Admin Tool Kit Click here and download it now
August 10th, 2010 10:36am
I have the same problem, I am setting up a new RDS server AKA Terminal Server
allow allowed the following Control Panel Items for users
Mirosoft.Mouse
Microsoft.Display
Microsoft.Keyboard
Microsoft.RegionAndLanguage
with GPO to only run some applications
Error
"This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator.
thanks James
August 16th, 2010 3:11pm
I have the same problem, I am setting up a new RDS server AKA Terminal Server
allow allowed the following Control Panel Items for users
Mirosoft.Mouse
Microsoft.Display
Microsoft.Keyboard
Microsoft.RegionAndLanguage
with GPO to only run some applications
Error
"This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator.
thanks
James
Free Windows Admin Tool Kit Click here and download it now
August 16th, 2010 3:11pm
I have the same problem, I am setting up a new RDS server AKA Terminal Server
allow allowed the following Control Panel Items for users
Mirosoft.Mouse
Microsoft.Display
Microsoft.Keyboard
Microsoft.RegionAndLanguage
with GPO to only run some applications
Error
"This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator.
thanks James
August 16th, 2010 3:11pm
Add shell32.dll to allowed list and it will work...
Free Windows Admin Tool Kit Click here and download it now
September 14th, 2010 4:39pm