group-policywindowswindows-server-2012-r2
Windows Server 2012 R2 and GPO. I wanted to increase security so I blocked
%AppData%\*.exe and %AppData%\*\*.exe
Spotify stopped working of course. I created another rule %AppData%\Roaming\Spotify\Spotify.exe, %AppData%\Roaming\Spotify\SpotifyLauncher.exe and set up to Unrestricted.
But still I receive error: This program is blocked by group policy. For more information, contact your system administrator.
Any suggestions how can I unblock selected programs?
Have you checked your eventvwr logs? Do you have other Domain Controllers (DCs) in this domain? Which one is the Global Catalog (GC) FSMO? Try running
dcdiag.exe
and check the output for problems, especially with the SYSVOL and/or replication with other DCs.
THIS CAN BE DANGEROUS: If this is not the only DC in the directory, and the event logs don't reveal anything, try making a copy of the sysvol\domain\policies and place it elsewhere on the hard drive of the server. Make sure you do this during off hours and make sure you perform a complete AD backup using:
ntbackup.exe backup systemstate /J "pre-delete-ad-backup" /F "c:\adbackups\ForestBackup.bkf" /V:yes /M normal
Copy the ForestBackup.bkf off of the server after the backup is complete.
After you create the backup and copy it elsewhere, delete the sysvol\domain\policies directory. Then force a replication with another DC in the Directory using replmon.exe
Check the FRS eventlog and see if you get messages about a successful sysvol replication. Keep in mind that until Sysvol is restored in complete, your server will not be able act as a DC, so make sure that another DC is available to your clients...
Best Answer
Oh stupid me.
Where does %AppData% lead? To C:\Users\[user]\AppData\Roaming so instead
%AppData%\Roaming\Spotify\Spotify.exethere should be%AppData%\Spotify\Spotify.exeAlso, for future use. I have to add something from AppData\Local so I can't use
%AppData%\Local, but%ProfilePath%\Appdata\Localor just%LocalAppData%.