Software Restriction policy applies but does not take effect on Windows 11 machine

PA 20 Reputation points
2024-10-23T09:24:40.0633333+00:00

Hi Team,

I have an issue here whereby when I pushed an GPO, basically the Software Restriction policy applies but does not take effect on Windows 11 machine.

I have checked on the machine and can confirm that the policy is indeed applied but it is not blocking the application as intended. This is working for some Windows 11 machine and for some machines, its not working.

Kindly advise on this on how I can rectify this issue on those machines.

Windows 11
Windows 11
A Microsoft operating system designed for productivity, creativity, and ease of use.
9,923 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Daisy Zhou 25,296 Reputation points Microsoft Vendor
    2024-10-23T11:18:27.26+00:00

    Hello PA,

    Thank you for posting in Q&A forum.

    It sounds like there may be an inconsistency in how the policy is being applied or interpreted by different machines. Here are a few troubleshooting steps you can take:

    1. Check for Policy Conflicts:

    Ensure there are no conflicting policies that might override or interfere with the intended policy.

    1. Update Group Policy:

    Run gpupdate /force on the machines where the policy is not working to make sure they are updated with the latest policies.

    1. Review Event Logs:

    Check the Event Viewer on the affected machines for any errors or warnings that might indicate why the policy is not being applied correctly. Look under "Windows Logs" -> "Application" and "System".

    1. Validate Policy Application:

    Use the gpresult /h gpresult.html command to generate a report on the affected machines. This report will show what policies are applied and can help identify where the issue might be.

    Checking Computer Configuration within gpresult, you can follow steps below.

    Logon this machine using administrator account.

    Open CMD (run as Administrator).

    Type gpresult /h C:\gpo.html and click Enter.

    Open gpo.html and check gpo setting under "Computer Details".

    1. Differences in Windows Versions:

    Ensure that the policy settings are compatible with all the versions of Windows 11 on the different machines. Sometimes, specific updates or versions have nuances in how they handle policies.

    1. Permissions and Security: Check the permissions and ensure that the users or computers have the correct rights to apply or be affected by the policy.

    https://learn.microsoft.com/en-us/windows-server/identity/software-restriction-policies/administer-software-restriction-policies

    https://learn.microsoft.com/en-us/windows-server/identity/software-restriction-policies/software-restriction-policies-technical-overview

    I hope the information above is helpful.

    If you have any questions or concerns, please feel free to let us know.

    Best Regards,

    Daisy Zhou

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.