I teach programming in Visual Studio. We want to run it on a terminal server. The problem is that whenever we compile our programs, the Windows refuses to start the created exe file. (I didn't even know the ability to block all exe files exists. And it is not very funny when we do programming.) A message box is shown, saying that running exe files is blocked by group policy. It applies to both .NET and plain Win32 exe programs. The problem is that our IT administrators say they don't know why does this happen and how to turn the blocking off. Can anybody help?
Group Policy is blocking exe files
executablegroup-policyvisual studiovisual studio 2010windows-server-2008-r2
Best Answer
First off, I hope your terminal server is a virtual machine. Before you continue, make sure you have a clean snapshot of the VM. One of your students will take advantage of the ability to run arbitrary applications and screw up your server. You should revert to the snapshot periodically, and always revert immediately before applying patches or installing or upgrading software. Then take a snapshot after that's done but before anyone can use the server. That way when some hoses your server, all you have to do is revert the snapshot.
There are a couple of ways to restrict programs from running.
In group policy, there are two areas to look under
Policies -> Windows Settings -> Security Settings
:Application Control Policies
andSoftware Restriction Policies
.There is also the
RestrictRun
registry key.And finally, third-party applications can use the registry key
Appinit_DLLs
.