Software Restrictions

Hello,
I am trying to use the Microsoft Managament Console to apply Group Policy to
individual user groups on a local level. All Group Policy settings that I
define are applied just fine. However, the Software Restriction Policy
settings that I've applied are being ignored. I've taken these steps:

Launch Microsoft Management Console (Start > Run > mmc), Add the Group
Policy Object Snap-In (File Menu) > Browse for Non-Administrators > Apply the
Disallowed Level as the Security Policy

By setting the Policy to Disallowed and removing the default Unrestricted
policies, the account can't log on at all. By allowing the entire Windows
path to be unrestriced, I can log on again, but it lets me run things out of
the Windows directory.

And yes, I'm testing this on the Guest account so it's definitely not being
ignored because the user does have admin privileges.

Thanks in advance.

Apparently I was oblivious to the face that the Program Files directory was
an allowed path. Hence, I no longer have a problem.

"Cameron" wrote:

> Hello,
> I am trying to use the Microsoft Managament Console to apply Group Policy to
> individual user groups on a local level. All Group Policy settings that I
> define are applied just fine. However, the Software Restriction Policy
> settings that I've applied are being ignored. I've taken these steps:
>
> Launch Microsoft Management Console (Start > Run > mmc), Add the Group
> Policy Object Snap-In (File Menu) > Browse for Non-Administrators > Apply the
> Disallowed Level as the Security Policy
>
> By setting the Policy to Disallowed and removing the default Unrestricted
> policies, the account can't log on at all. By allowing the entire Windows
> path to be unrestriced, I can log on again, but it lets me run things out of
> the Windows directory.
>
> And yes, I'm testing this on the Guest account so it's definitely not being
> ignored because the user does have admin privileges.
>
> Thanks in advance.