How to Remove Software Restriction?

[Guest]

We're running 2000 Server and XP SP1 clients. I created a Software Restriction in the user section of one of my group policy objects which is only applied to a specific group of users. Now that I'm done testing on this particular group, I would like to remove this software restriction policy and create a new one in a GPO that is applied to the entire OU.

The problem is that there is no "Remove" option. And if I simply set the policy to "Unrestricted", this particular GPO has a higher priority over the one that is applied to the entire OU. We cannot reorder the policies because our design is that all specific group-related GPOs override the default OU GPO. So if I set it to "Unrestricted" as some have suggested, this particular group will not have the OU-based software restriction policy applied unless I can completely remove the Software restriction policy from this group-based GPO

Can someone tell me how to remove the Software Restriction policy from this GPO?

Thanks

--Todd

 

[Chriss3]

Todd, Right Click the entire node for Software Restriction Policy there you
have an alternative to delete it.

--
Regards
Christoffer Andersson

No email replies please - reply in the newsgroup

We're running 2000 Server and XP SP1 clients. I created a Software

Restriction in the user section of one of my group policy objects which is
only applied to a specific group of users. Now that I'm done testing on
this particular group, I would like to remove this software restriction
policy and create a new one in a GPO that is applied to the entire OU.

The problem is that there is no "Remove" option. And if I simply set the

policy to "Unrestricted", this particular GPO has a higher priority over the
one that is applied to the entire OU. We cannot reorder the policies
because our design is that all specific group-related GPOs override the
default OU GPO. So if I set it to "Unrestricted" as some have suggested,
this particular group will not have the OU-based software restriction policy
applied unless I can completely remove the Software restriction policy from
this group-based GPO.

 

[Guest]

There is no remove option when I right-click
the "Software Restriction Policy" node. All that is
there is "Help". I'm at an XP SP1 workstation with
GPMC. I'm logged in with Domain Admin rights.

I believe others have described the same problem. I wish
it were that easy!

--Todd.

 

[Stew Basterash]

Hopefully you created the software restriction in it's own policy... that
way you can do what I learned to do... just delete the entire policy...

Software Restriction has some additional challanges... It's a great idea on
paper, but in practical use it is weak in documentation and
implementation... I tried to create a secured environment where by I wanted
all software restricted except for the applications that I wanted the user
to have... I still have not gotten this to work... and It's not for lack of
trying... If you restirct all... this works fine... however try to get a
HASH to work on an application... I could not get the stinking HASH to work
on anything other than simple EXE's... Adobe Acrobat reader... forget it...
Microsoft Office... Make sure you get all the exe's or forget it... I was
unsuccessfull and getting any HASH to work whatsoever...

Still looking for that answer???

We're running 2000 Server and XP SP1 clients. I created a Software

Restriction in the user section of one of my group policy objects which is
only applied to a specific group of users. Now that I'm done testing on
this particular group, I would like to remove this software restriction
policy and create a new one in a GPO that is applied to the entire OU.

The problem is that there is no "Remove" option. And if I simply set the

policy to "Unrestricted", this particular GPO has a higher priority over the
one that is applied to the entire OU. We cannot reorder the policies
because our design is that all specific group-related GPOs override the
default OU GPO. So if I set it to "Unrestricted" as some have suggested,
this particular group will not have the OU-based software restriction policy
applied unless I can completely remove the Software restriction policy from
this group-based GPO.

 

[Chriss3]

Todd, I'm not sure of this behavior in GPMC. How ever I did this for a few
days ago logged on to one of my DCs.

Have you must this question in the Group Policy groups?

You may get better support there. Have a nice day!