Software Restriction Policy

D

Debbie Giuliano

I have currently upgraded to XPe SP2. I have added the necessary snap-ins
for managment console and local security policy. However in the local
security policy on an XP Pro machine I have a folder called Software
Restriction Policy. This policy will allow you to add a file path to
restrict users from using a program. I have a few customer who want to
disallow users to use Internet Explorer. When I view the local security
policy on the XPe machine, I have no folder called Software Restrictions. I
looked in the mmc and tried adding snap ins but do not see how I can get
this folder. I also know that on XP Home that the software restriction
policy folder is not available in XP Home. Is that also the case with XPe?
Or am I missing a component in my image?

Thanks,

Debbie Giuliano
 
D

Debbie Giuliano

Yes, I have Security Shell Extension and Windows Security Configuration
Editor Client Engine and Windows Security Configuration Editor Engine as
well. I am unsure if I have to do something custom for it to appear
 
K

KM

Debbie,

Just in case, check if you also got "Certificate MMC Snap-In" component.

If you did, please exprot the following keys from XP Pro machine and install them on your run time:
[HKLM\SOFTWARE\Microsoft\MMC\SnapIns\{93F7AA8E-CF82-4CB7-9251-48BC637A43B8}]
[HKLM\SOFTWARE\Microsoft\MMC\NodeTypes\{668A49ED-8888-11d1-AB72-00C04FB6C6FA}]

Then reboot and see if the folder appears in the running secpol.msc GUI.
Let us know the results.
 
D

Debbie Giuliano

I believe I had the Certificate MMC Snap-In in. However, I am running
through another FBA and I will check the registry keys and import them and
let you know what happens. Thanks for all your help, it is much
appreciated! I should know in a couple of hours.

--


---------------------------------------------------------------------
"Eliminate annoying spam!
My mailbox is protected by iHateSpam, the #1-rated spam buster."

http://www.ihatespam.net


KM said:
Debbie,

Just in case, check if you also got "Certificate MMC Snap-In" component.

If you did, please exprot the following keys from XP Pro machine and
install them on your run time:

[HKLM\SOFTWARE\Microsoft\MMC\SnapIns\{93F7AA8E-CF82-4CB7-9251-48BC637A43B8}]

[HKLM\SOFTWARE\Microsoft\MMC\NodeTypes\{668A49ED-8888-11d1-AB72-00C04FB6C6FA}]

Then reboot and see if the folder appears in the running secpol.msc GUI.
Let us know the results.

--
Regards,
KM, BSquare Corp.

Yes, I have Security Shell Extension and Windows Security Configuration
Editor Client Engine and Windows Security Configuration Editor Engine as
well. I am unsure if I have to do something custom for it to appear

--


---------------------------------------------------------------------
"Eliminate annoying spam!
My mailbox is protected by iHateSpam, the #1-rated spam buster."

http://www.ihatespam.net
Click to expand...
Click to expand...
 
D

Debbie Giuliano

Hello KM,

That did the trick, I now have the software restrictions folder. Thanks
very much. I did not need to import the snap-ins. It must have been
certificate manager snap-in that did the trick.

Thanks again and I owe you a big favor.

Deb

--


---------------------------------------------------------------------
"Eliminate annoying spam!
My mailbox is protected by iHateSpam, the #1-rated spam buster."

http://www.ihatespam.net


Debbie Giuliano said:
I believe I had the Certificate MMC Snap-In in. However, I am running
through another FBA and I will check the registry keys and import them and
let you know what happens. Thanks for all your help, it is much
appreciated! I should know in a couple of hours.

--


---------------------------------------------------------------------
"Eliminate annoying spam!
My mailbox is protected by iHateSpam, the #1-rated spam buster."

http://www.ihatespam.net


KM said:
Debbie,

Just in case, check if you also got "Certificate MMC Snap-In" component.

If you did, please exprot the following keys from XP Pro machine and
install them on your run time:

[HKLM\SOFTWARE\Microsoft\MMC\SnapIns\{93F7AA8E-CF82-4CB7-9251-48BC637A43B8}]

[HKLM\SOFTWARE\Microsoft\MMC\NodeTypes\{668A49ED-8888-11d1-AB72-00C04FB6C6FA}]

Then reboot and see if the folder appears in the running secpol.msc GUI.
Let us know the results.

--
Regards,
KM, BSquare Corp.

Yes, I have Security Shell Extension and Windows Security Configuration
Editor Client Engine and Windows Security Configuration Editor Engine as
well. I am unsure if I have to do something custom for it to appear

--


---------------------------------------------------------------------
"Eliminate annoying spam!
My mailbox is protected by iHateSpam, the #1-rated spam buster."

http://www.ihatespam.net


Debbie,

Do you have "Security Shell Extension" component in your
configuration?
I assumed the "Windows Security Configuration Editor Client Engine"
component is in your image already.


Also, that was a known issue with SP1:
http://groups-beta.google.com/group/microsoft.public.windowsxp.embedded/msg/576f8d764b15fe40

--
Regards,
KM, BSquare Corp.

I have currently upgraded to XPe SP2. I have added the necessary
snap-ins
for managment console and local security policy. However in the
local
security policy on an XP Pro machine I have a folder called Software
Restriction Policy. This policy will allow you to add a file path to
restrict users from using a program. I have a few customer who want
to
disallow users to use Internet Explorer. When I view the local
security
policy on the XPe machine, I have no folder called Software
Restrictions.
I
looked in the mmc and tried adding snap ins but do not see how I can
get
this folder. I also know that on XP Home that the software
restriction
policy folder is not available in XP Home. Is that also the case
with
XPe?
Or am I missing a component in my image?

Thanks,

Debbie Giuliano

--


---------------------------------------------------------------------
"Eliminate annoying spam!
My mailbox is protected by iHateSpam, the #1-rated spam buster."

http://www.ihatespam.net
Click to expand...
Click to expand...
Click to expand...
 
K

KM

Debbie,

Yup.. That must be the "Certificate MMC Snap-In". It brings is the certmgr.dll that is responsible for the
[HKLM\SOFTWARE\Microsoft\MMC\SnapIns\{93F7AA8E-CF82-4CB7-9251-48BC637A43B8}] registry settings.
These reg.settings is the snap-in for the Policies you were looking for.

I am glad it got fixed so quickly :)

--
Regards,
KM, BSquare Corp.

Hello KM,

That did the trick, I now have the software restrictions folder. Thanks
very much. I did not need to import the snap-ins. It must have been
certificate manager snap-in that did the trick.

Thanks again and I owe you a big favor.

Deb

--


---------------------------------------------------------------------
"Eliminate annoying spam!
My mailbox is protected by iHateSpam, the #1-rated spam buster."

http://www.ihatespam.net


Debbie Giuliano said:
I believe I had the Certificate MMC Snap-In in. However, I am running
through another FBA and I will check the registry keys and import them and
let you know what happens. Thanks for all your help, it is much
appreciated! I should know in a couple of hours.

--


---------------------------------------------------------------------
"Eliminate annoying spam!
My mailbox is protected by iHateSpam, the #1-rated spam buster."

http://www.ihatespam.net


KM said:
Debbie,

Just in case, check if you also got "Certificate MMC Snap-In" component.

If you did, please exprot the following keys from XP Pro machine and
install them on your run time:

[HKLM\SOFTWARE\Microsoft\MMC\SnapIns\{93F7AA8E-CF82-4CB7-9251-48BC637A43B8}]

[HKLM\SOFTWARE\Microsoft\MMC\NodeTypes\{668A49ED-8888-11d1-AB72-00C04FB6C6FA}]

Then reboot and see if the folder appears in the running secpol.msc GUI.
Let us know the results.

--
Regards,
KM, BSquare Corp.


Yes, I have Security Shell Extension and Windows Security Configuration
Editor Client Engine and Windows Security Configuration Editor Engine as
well. I am unsure if I have to do something custom for it to appear

--


---------------------------------------------------------------------
"Eliminate annoying spam!
My mailbox is protected by iHateSpam, the #1-rated spam buster."

http://www.ihatespam.net


Debbie,

Do you have "Security Shell Extension" component in your
configuration?
I assumed the "Windows Security Configuration Editor Client Engine"
component is in your image already.


Also, that was a known issue with SP1:
http://groups-beta.google.com/group/microsoft.public.windowsxp.embedded/msg/576f8d764b15fe40

--
Regards,
KM, BSquare Corp.

I have currently upgraded to XPe SP2. I have added the necessary
snap-ins
for managment console and local security policy. However in the
local
security policy on an XP Pro machine I have a folder called Software
Restriction Policy. This policy will allow you to add a file path to
restrict users from using a program. I have a few customer who want
to
disallow users to use Internet Explorer. When I view the local
security
policy on the XPe machine, I have no folder called Software
Restrictions.
I
looked in the mmc and tried adding snap ins but do not see how I can
get
this folder. I also know that on XP Home that the software
restriction
policy folder is not available in XP Home. Is that also the case
with
XPe?
Or am I missing a component in my image?

Thanks,

Debbie Giuliano

--


---------------------------------------------------------------------
"Eliminate annoying spam!
My mailbox is protected by iHateSpam, the #1-rated spam buster."

http://www.ihatespam.net
Click to expand...
Click to expand...
Click to expand...
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

What's the Differents between XPe and XPPro 2
Software Restriction Policies 2
Software Installation via Group Policy 4
MMC with Minlogon 1
Group Policy Question 1
The description for Event ID (...) in Source (...) cannot be XPE SP2 3
Event IDs 3
Vulnerability: shares enumerated through a null session 4

Top