Group Policy is blocking exe files

executablegroup-policyvisual studiovisual studio 2010windows-server-2008-r2

I teach programming in Visual Studio. We want to run it on a terminal server. The problem is that whenever we compile our programs, the Windows refuses to start the created exe file. (I didn't even know the ability to block all exe files exists. And it is not very funny when we do programming.) A message box is shown, saying that running exe files is blocked by group policy. It applies to both .NET and plain Win32 exe programs. The problem is that our IT administrators say they don't know why does this happen and how to turn the blocking off. Can anybody help?

Best Answer

First off, I hope your terminal server is a virtual machine. Before you continue, make sure you have a clean snapshot of the VM. One of your students will take advantage of the ability to run arbitrary applications and screw up your server. You should revert to the snapshot periodically, and always revert immediately before applying patches or installing or upgrading software. Then take a snapshot after that's done but before anyone can use the server. That way when some hoses your server, all you have to do is revert the snapshot.

There are a couple of ways to restrict programs from running.

  • In group policy, there are two areas to look under Policies -> Windows Settings -> Security Settings: Application Control Policies and Software Restriction Policies.

  • There is also the RestrictRun registry key.

  • And finally, third-party applications can use the registry key Appinit_DLLs.

Related Topic