paidtoplay
Instructor
I want to implement "Software Restriction Policies" on my Terminal Services server, yet still allow execution of any batch/cmd/vbs files as logon/logoff scripts.
Even when I include a path rule for:
\\domainname\sysvol\policies\domainname\GUID\user\logon\*.*
the script will not run. Instead I get the message "Windows cannot open this program because it has been prevented by a software restriction policy".
There is no problem running the script when I set the default action of Software Restriction Polices to 'Unrestricted'. This script involves nothing more than a couple of drive mappings and as 'net.exe' is in the System32 directory with a matching path rule, I don't see why that would be a problem. Likewise for cscript.exe and wscript.exe
Any ideas?
Even when I include a path rule for:
\\domainname\sysvol\policies\domainname\GUID\user\logon\*.*
the script will not run. Instead I get the message "Windows cannot open this program because it has been prevented by a software restriction policy".
There is no problem running the script when I set the default action of Software Restriction Polices to 'Unrestricted'. This script involves nothing more than a couple of drive mappings and as 'net.exe' is in the System32 directory with a matching path rule, I don't see why that would be a problem. Likewise for cscript.exe and wscript.exe
Any ideas?