Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: blocked by group policy


20 Apr 2010   #1
arp

windows 7
 
 
blocked by group policy

hi

not sure if that is the correct section, sorry if it isn't.

when i try to run a specific exe i get the following error:


anyone ever seen this message before? i don't know if that is relevant, but the exe i am trying to run is located on an older partition that was made under win XP. but i already changed owner and full permissions on the whole partition to myself in Windows 7. how do i solve this problem?

the output of gpresult /z

Code:
Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001
 
Created On 20.04.2010 at 12:11:08
 
 
 
RSOP data for wx\kon on WX : Logging Mode
--------------------------------------------------
 
OS Configuration: Standalone Workstation
OS Version: 6.1.7600
Site Name: N/A
Roaming Profile: N/A
Local Profile: C:\Users\kon
Connected over a slow link?: No
 
 
USER SETTINGS
--------------
 
Last time Group Policy was applied: 20.04.2010 at 11:54:10
Group Policy was applied from: N/A
Group Policy slow link threshold: 500 kbps
Domain Name: wx
Domain Type: <Local Computer>
 
Applied Group Policy Objects
-----------------------------
Local Group Policy
 
The user is a part of the following security groups
---------------------------------------------------
None
Everyone
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
CONSOLE LOGON
NT AUTHORITY\Authenticated Users
This Organization
LOCAL
NTLM Authentication
High Mandatory Level
 
The user has the following security privileges
----------------------------------------------
 
 
Resultant Set Of Policies for User
-----------------------------------
 
Software Installations
----------------------
N/A
 
Logon Scripts
-------------
N/A
 
Logoff Scripts
--------------
N/A
 
Public Key Policies
-------------------
N/A
 
Administrative Templates
------------------------
GPO: Local Group Policy
KeyName: Software\Policies\Microsoft\Windows\AppCompat\DisablePCA
Value: 1, 0, 0, 0
State: Enabled
 
Folder Redirection
------------------
N/A
 
Internet Explorer Browser User Interface
----------------------------------------
N/A
 
Internet Explorer Connection
----------------------------
N/A
 
Internet Explorer URLs
----------------------
N/A
 
Internet Explorer Security
--------------------------
N/A
 
Internet Explorer Programs
--------------------------
N/A


My System SpecsSystem Spec
.

20 Apr 2010   #2

Windows 7 x64 pro/ Windows 7 x86 Pro/ XP SP3 x86
 
 

Do you get the error when you click on "Run as administrator"?

Try changing the security policy. Go to gpedit.msc-computer configuration-windows settings-security settings-local policies-security options.Change "User Account Control: Behavior of the elevation prompt for standard users:" to "prompt for credentials". This will result in blocked programs prompting for elevation. When it does, enter your admin password.

If you are part of a domain, then it may ahve to do with network security policy, for which you'll need to contact your network admin (as the error message says).
My System SpecsSystem Spec
20 Apr 2010   #3
arp

windows 7
 
 

yes, i am running the program as admin.

not part of a domain as seen in gpresult:
Domain Type: Local Computer

i am beginning to think it has nothing to do with group policies at all and the error might be misleading, but i don't know what to do next.
My System SpecsSystem Spec
.


20 Apr 2010   #4

Windows 7 x64 pro/ Windows 7 x86 Pro/ XP SP3 x86
 
 

Did you try changing the security setting?

What you can do is take ownership of the .exe and indeed of all folders and drives on your computer. This should resolve any permissions issue. See the tutorial below.

Take Ownership Shortcut
My System SpecsSystem Spec
20 Apr 2010   #5
arp

windows 7
 
 

i took ownership of all files but unfortunately i still get the same error.
My System SpecsSystem Spec
20 Apr 2010   #6
Microsoft MVP

64-bit Windows 8.1 Enterprise
 
 

Hello Arp, and welcome to Seven Forums.

It sounds like the program may have been blocked using AppLocker. Double check in the AppLocker rules to see if one was created to block that program.

Hope this helps,
Shawn
My System SpecsSystem Spec
20 Apr 2010   #7
arp

windows 7
 
 

hello Shawn, thanks for the reply.

there were no items listed in the rulesets, i also added the exe that causes this error in a allowed rule, but the same error appears.
My System SpecsSystem Spec
20 Apr 2010   #8

MS Windows 7 Ultimate SP1 64-bit
 
 

Quote   Quote: Originally Posted by arp View Post
hi

not sure if that is the correct section, sorry if it isn't.

when i try to run a specific exe i get the following error:


anyone ever seen this message before? i don't know if that is relevant, but the exe i am trying to run is located on an older partition that was made under win XP. but i already changed owner and full permissions on the whole partition to myself in Windows 7. how do i solve this problem?

the output of gpresult /z

Code:
Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001
 
Created On 20.04.2010 at 12:11:08
 
 
 
RSOP data for wx\kon on WX : Logging Mode
--------------------------------------------------
 
OS Configuration: Standalone Workstation
OS Version: 6.1.7600
Site Name: N/A
Roaming Profile: N/A
Local Profile: C:\Users\kon
Connected over a slow link?: No
 
 
USER SETTINGS
--------------
 
Last time Group Policy was applied: 20.04.2010 at 11:54:10
Group Policy was applied from: N/A
Group Policy slow link threshold: 500 kbps
Domain Name: wx
Domain Type: <Local Computer>
 
Applied Group Policy Objects
-----------------------------
Local Group Policy
 
The user is a part of the following security groups
---------------------------------------------------
None
Everyone
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
CONSOLE LOGON
NT AUTHORITY\Authenticated Users
This Organization
LOCAL
NTLM Authentication
High Mandatory Level
 
The user has the following security privileges
----------------------------------------------
 
 
Resultant Set Of Policies for User
-----------------------------------
 
Software Installations
----------------------
N/A
 
Logon Scripts
-------------
N/A
 
Logoff Scripts
--------------
N/A
 
Public Key Policies
-------------------
N/A
 
Administrative Templates
------------------------
GPO: Local Group Policy
KeyName: Software\Policies\Microsoft\Windows\AppCompat\DisablePCA
Value: 1, 0, 0, 0
State: Enabled
 
Folder Redirection
------------------
N/A
 
Internet Explorer Browser User Interface
----------------------------------------
N/A
 
Internet Explorer Connection
----------------------------
N/A
 
Internet Explorer URLs
----------------------
N/A
 
Internet Explorer Security
--------------------------
N/A
 
Internet Explorer Programs
--------------------------
N/A
And you are a member of what workgroup? The administrator of the workgroup is? The name of the program is?
My System SpecsSystem Spec
20 Apr 2010   #9
arp

windows 7
 
 

my workgroup is called WORKGROUP and the user "kon" (me) is admin. the program is justcause2.exe
My System SpecsSystem Spec
20 Apr 2010   #10

Windows 7 Professional 32-bit (6.1, Build 7600)
 
 

Quote   Quote: Originally Posted by arp View Post
hello Shawn, thanks for the reply.

there were no items listed in the rulesets, i also added the exe that causes this error in a allowed rule, but the same error appears.
If it's not AppLocker then do you have Software Restriction Policy enabled. Here's a bat file(code) I use to disable it on the fly wihtout entering Local Security to turn it off. I also use one to turn it back on, it's just easier this way. All it does is set it back to the default level of allowed. Run it and then try running your app. I have shortcuts to each bat file on my start menu for quick access

Code:
REG ADD HKLM\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\ /v DefaultLevel /t REG_DWORD /d 0x00040000 /f
My System SpecsSystem Spec
Reply

 blocked by group policy




Thread Tools



Similar help and support threads for2: blocked by group policy
Thread Forum
Group Policy - Apply to a Specific User or Group Tutorials
Group Policy Settings - Blocked Downloads General Discussion
Group Policy General Discussion
Group Policy Applies Policy EXCEPT for 1 Setting! General Discussion
Solved Windows 7 . This program is blocked by group policy General Discussion
Windows 7 . This program is blocked by group policy General Discussion
Group Policy Editor or Local Security Policy System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 01:39 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33