We has implemented Software Restriction Policies on our Windows XP SP2 build since last year ago before started using window7, but currently we are now having problems with the functioning of the SCCM Client after SCCM OSD window 7 migration.
What the Software Restriction Policies does is prevent certain extensions from running such as EXE, COMs and VBS. They do have exclusion folders but I am not sure which folders should be excluded besides the standard Windows\System32\CCM folder for SCCM to function.
I was wondering if there is any information about what access (Registry/File/Folder/Executable) the SCCM Client Install needs in order to run correctly.We are now unable to launch the Run Advertised Programs,Program Download Monitor and Configuration Manager due to the software restriction policy.
I have checked the Client Installation Logs which all report a successful install during SCCM OSD but when running the client it was blocked by the software restriction policy. I already addedSoftware Restriction Policie Settings as below :-
But still unable to execute the Run Advertised program,Program Download Monitor and Configuration Manager. There is no problem with SCCM client execution if i move out that testing machine from the software restriction policy OU.
Is it any thing i still need to add into the software restriction policy in order to execute the SCCM client.
We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.
Hi,
We has implemented Software Restriction Policies on our Windows XP SP2 build since last year ago before started using window7, but currently we are now having problems with the functioning of the SCCM Client after SCCM OSD window 7 migration.
What the Software Restriction Policies does is prevent certain extensions from running such as EXE, COMs and VBS. They do have exclusion folders but I am not sure which folders should be excluded besides the standard Windows\System32\CCM folder for SCCM to function.
I was wondering if there is any information about what access (Registry/File/Folder/Executable) the SCCM Client Install needs in order to run correctly.We are now unable to launch the Run Advertised Programs,Program Download Monitor and Configuration Manager due to the software restriction policy.
I have checked the Client Installation Logs which all report a successful install during SCCM OSD but when running the client it was blocked by the software restriction policy. I already added Software Restriction Policie Settings as below :-
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%\*.exe
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%\System32\*.exe
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%\System32\ccm
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%\System32\ccmsetup
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir%
C:\Windows\System32\CCM
C:\Windows\System32\ccmsetup
But still unable to execute the Run Advertised program,Program Download Monitor and Configuration Manager. There is no problem with SCCM client execution if i move out that testing machine from the software restriction policy OU.
Is it any thing i still need to add into the software restriction policy in order to execute the SCCM client.
Any ideas would be welcome.
Thanks and regards,
Leong
Share this post
Link to post
Share on other sites