Problem with Software Restriction Policies

[wearetheborg]

Win 7 Pro

I activated SRP, and here are my addtional rules:

%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir%
C:\Program Files (x86)
C:\swsetup
C:\Windows

Now, I cannot start Local Security Policies from the control panel, same with the terminal. I have to browse to the file in the windows directory and launch it from there.

How do I fix that?

[Greg S]

Originally Posted by wearetheborg

Win 7 Pro

I activated SRP, and here are my addtional rules:

%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir%
C:\Program Files (x86)
C:\swsetup
C:\Windows

Now, I cannot start Local Security Policies from the control panel, same with the terminal. I have to browse to the file in the windows directory and launch it from there.

How do I fix that?

Just guessing, you have it too strict which I think is a good thing. Mine is setup that way. When it's too strict, the shortcut.lnk's are blocked in the start menu. If that is the case, you have to add rules for the shortcuts in the start menu.



You could take the time to be more specific with the path but I didn't. Other alternative would be to remove the .lnk extension in SRP.

[Martijn2]

Other alternative would be to remove the .lnk extension in SRP.

I would follow this advice

[wearetheborg]

Originally Posted by Greg S

Just guessing, you have it too strict which I think is a good thing. Mine is setup that way. When it's too strict, the shortcut.lnk's are blocked in the start menu. If that is the case, you have to add rules for the shortcuts in the start menu.

Attachment 225334

You could take the time to be more specific with the path but I didn't. Other alternative would be to remove the .lnk extension in SRP.

Thanks.
How do I remove .lnk extension in SRP? In win XP, there was an option to specify filename extensions, but I could not find that in win 7

[J_L]

Check Designated File Types.