Share via

This Application has been blocked by your system administrator. But which application?

Romain LETOT 0 Reputation points
2023-10-04T11:41:28.67+00:00

Hi everyone,

On a RDS Server recently installed users has the message "This Application has been blocked by your system administrator."

Untitled-design-11

But I can't find which application generate this message.

I looked in event viewer and in Windows Security in Settings but I didn't see anything. I tried to trace the process executed when the sessions started but there were so many that I couldn't find this information.

Do you know if there is a log of these blocked applications in Windows please?

Thank you all :)

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,410 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,762 questions
0 comments

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Vadims Podāns 9,116 Reputation points MVP
    2023-10-04T12:09:21.3966667+00:00

    It is either AppLocker or WDAC (windows defender application control). These are built-in features that allow administrators to define policies what applications are permitted in your environment. Applocker, for example, has its own event log: Application and Services Logs\Microsoft\Windows\Applocker

    They are not enabled by default. You have to enable eventlogs and then it will be filled with the history of permitted and blocked applications.

  2. LETOT Romain 0 Reputation points
    2023-10-19T11:47:44.0233333+00:00

    Hello,

    i finally found a solution.

    The application ntprint.exe in C:\Windows\system32 was the application that blocked users.

    I added the user group to the local printing operator group and this resolved the situation.

    Thanks for your help !

    0 comments
  3. Zafer KAYA 0 Reputation points
    2024-05-23T12:32:44.0566667+00:00

    Hello

    All devices running Windows 11 22H2 or later come with the Smart App Control option. Smart App Control (SAC) is a Windows Security feature that helps protect you against malicious apps. To turn this off, go to Computer > HKEY_LOCAL_MACHINE > SYSTEM > CurrentControlSet > Control > CI > Policy in the Registry.

    The "VerifiedAndReputablePolicyState" value must be changed to "0". Then restart your computer and the problem will be solved. This problem is usually experienced on Dell Computers. Can you confirm if the problem is solved?

    0 comments