Hi,

We have 2 servers. 1 Dc, 1 TS server. I use GPO so that my terminal users
can only use certain application. The setting in the gpo is "run only allowed
windows applications". This went fine for a while and now, for whatever
reason, some of the applications that are in the "list of allowed
applications" (ex; outlook, notepad) are being blocked by the same GPO (this
operation has been canceled due to restrictions.....). In the event viewer,
there is nothing there that can give me a clue.

Normally I see in the event viewer an event that says that the .exe
application has been blocked or something like this but for whatever reason I
see nothing.

Anybody has an idea where I can find a way to make those things logged in
event viewer or find information somewhere else that could help me?

ps; the gpo's are applied successfully. Event viewer of both servers are
indicating no errors of some sort.

Thanks

Hello Sleb,

Do you use loopback processing on the TS OU, check out this ones:
http://support.microsoft.com/kb/260370

http://technet.microsoft.com/en-us/library/cc785074(WS.10).aspx

http://technet.microsoft.com/en-us/library/cc757470(WS.10).aspx

http://support.microsoft.com/kb/231287

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi,
>
> We have 2 servers. 1 Dc, 1 TS server. I use GPO so that my terminal
> users can only use certain application. The setting in the gpo is "run
> only allowed windows applications". This went fine for a while and
> now, for whatever reason, some of the applications that are in the
> "list of allowed applications" (ex; outlook, notepad) are being
> blocked by the same GPO (this operation has been canceled due to
> restrictions.....). In the event viewer, there is nothing there that
> can give me a clue.
>
> Normally I see in the event viewer an event that says that the .exe
> application has been blocked or something like this but for whatever
> reason I see nothing.
>
> Anybody has an idea where I can find a way to make those things logged
> in event viewer or find information somewhere else that could help me?
>
> ps; the gpo's are applied successfully. Event viewer of both servers
> are indicating no errors of some sort.
>
> Thanks
>

Hello Sleb,

Do you use loopback processing on the TS OU, check out this ones:
http://support.microsoft.com/kb/260370

http://technet.microsoft.com/en-us/library/cc785074(WS.10).aspx

http://technet.microsoft.com/en-us/library/cc757470(WS.10).aspx

http://support.microsoft.com/kb/231287

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi,
>
> We have 2 servers. 1 Dc, 1 TS server. I use GPO so that my terminal
> users can only use certain application. The setting in the gpo is "run
> only allowed windows applications". This went fine for a while and
> now, for whatever reason, some of the applications that are in the
> "list of allowed applications" (ex; outlook, notepad) are being
> blocked by the same GPO (this operation has been canceled due to
> restrictions.....). In the event viewer, there is nothing there that
> can give me a clue.
>
> Normally I see in the event viewer an event that says that the .exe
> application has been blocked or something like this but for whatever
> reason I see nothing.
>
> Anybody has an idea where I can find a way to make those things logged
> in event viewer or find information somewhere else that could help me?
>
> ps; the gpo's are applied successfully. Event viewer of both servers
> are indicating no errors of some sort.
>
> Thanks
>