Exchange Management Shell blocked by software restriction

Question

Hello

Environment: Windows Server 2022 with Exchange Server CU13 German without October 2023 security update. This always fails with an error.

In the event viewer I see the following entry:

Installation of C:\Windows\SoftwareDistribution\Download\0bbd1796cf75dd8f25bd03b8f551eff1\img\Exchange2019-KB5030877-x64-en.MSP was not allowed by the Software Restrictions policy. The Windows Installer only allows the installation of items that have no restrictions. The authorization level returned by the software restrictions policy was 0x0 (status return value 0x800b010c).

Therefore, I searched through the web. An approach was written in a post about the Exchange Management Shell to clarify which certificate is installed.

I then discovered that when I accessed the Exchange Management Shell, I received the following error:

The file "D:\Exchange\bin\RemoteExchange.ps1" cannot be loaded because the operation is prevented by guidelines for the Software limitation, e.g. B. the policies created by Group Policy are blocked.

BUT...to the best of my knowledge, I have not applied any software restrictions in any policy to the Exchange Server. Also shows me gpresult /r

Where can I look further to find the “culprit” that is causing a software limitation?

Thank you for your help.

Greetings Markus

Answer 1

Hello @Mame Meier

Are you a system administrator? Software Restriction Policies (SRP) are Group Policy-based features that are rules set by administrators. You can check if there are any SRP at the following path.

Also, you can take a look at this: Troubleshoot Software Restriction Policies

Regards

Shaofan

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". 

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.  

Answer 2

Hello Mame，
What is your result for typing "get-executionpolicy"?

Try "Set-ExecutionPolicy Unrestricted -Scope CurrentUser"

Regards

Answer 3

I have the same problem. Any solution for the problem?

Answer 4

I would like like to bring an information to that post which may be important. Or may be not even be relevant.

But I said to myself better share it....

To access the Exchange Admin Center I installed a 2FA with DUO duo.com. Do not hop ethat this is blocking the access of the EMS?