Re: Software Restriction Policy won't apply

Tech-Archive recommends: Fix windows errors by optimizing your registry

What happens when you change the default security level back to
unrestricted?

On Sat, 3 Mar 2007 07:15:00 -0800, Mark H
<MarkH@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

I want to allow certain users to only run specific software. In Active
Directory I created a new Organizational Unit and moved a test user there. In
Group Policy I created a Software Restriction Policy and linked it to the new
OU. To test it I created a path rule to disallow running Solitare
(C:\Windows\system32\sol.exe). I log in that user on another computer and
sure enough Solitare does not run. I then change the default Security Level
from Unrestricted to Disallowed and change the security level on the rule
from Disallowed to Unrestricted. This should prevent all programs from
running but allow Solitre to run. I log out and log in the user. I try to run
Solitare and I get the dialog box saying it is restricted from running.

What don't I understand? Is there something about SBS 2003 that prevents
this from working?
.