Event ID 865 — Software Restriction Policy Notification

Applies To: Windows Server 2008 R2

Software Restriction Policy Notification displays a messages to the user and writes an event to the event log when the user attempts to run a program that is not allowed by the policy. If the software restriction policy is enforced on all users, then messages will be displayed to both standard users and administrators. If the policy is enforced on all users except local administrators, then users logged on with administrative credentials will not be notified as the policy will not apply to the programs that they run.  

If the policy is enforced on all users and the Basic User default security level is selected, local administrators may not be able to run programs that require administrative credentials unless those programs are specifically excepted from the rule.

Event Details

Product: Windows Operating System
ID: 865
Source: Microsoft-Windows-SoftwareRestrictionPolicies
Version: 6.1
Symbolic Name: SrpEvt_AccessDisabledByPolicyDefault
Message: Access to %1 has been restricted by your Administrator by the default software restriction policy level.


This is a normal condition. No further action is required.

Software Restriction Policy Notification

Core Security