F
FluffyBeaver
Hello.
I've enable an AppLocker policy via Local Security Policy Editor on one server with a RDS role.
When I saw rules are applied and restrictions work I removed all local rules and make GPO which contains the equal rules. Also I included an option for autostart of AppMgmt service.
Then I applied this GPO to DRS farm and to the first (test) server as well. But restrictions work only on the first server.
However, when I invoke
'Get-AppLockerPolicy -Effective'
I have the same results for all servers. And what is more, when I try to check something more specific I can see that rules are applied to all servers. For example:
'Get-AppLockerPolicy -Effective | Test-AppLockerPolicy -User GENERAL\verst -Path '\\file-srv\redirected\Desktop\Verst\Рабочий стол\*.exe' | Format-List'
returns
FilePath : \\file-srv\redirected\Desktop\Verst\Рабочий стол\putty.exe
PolicyDecision : Denied
MatchingRule : Desktop - Deny - test
But users aren't able to run this application only on the first mentioned server.
What did I do wrong?
Continue reading...
I've enable an AppLocker policy via Local Security Policy Editor on one server with a RDS role.
When I saw rules are applied and restrictions work I removed all local rules and make GPO which contains the equal rules. Also I included an option for autostart of AppMgmt service.
Then I applied this GPO to DRS farm and to the first (test) server as well. But restrictions work only on the first server.
However, when I invoke
'Get-AppLockerPolicy -Effective'
I have the same results for all servers. And what is more, when I try to check something more specific I can see that rules are applied to all servers. For example:
'Get-AppLockerPolicy -Effective | Test-AppLockerPolicy -User GENERAL\verst -Path '\\file-srv\redirected\Desktop\Verst\Рабочий стол\*.exe' | Format-List'
returns
FilePath : \\file-srv\redirected\Desktop\Verst\Рабочий стол\putty.exe
PolicyDecision : Denied
MatchingRule : Desktop - Deny - test
But users aren't able to run this application only on the first mentioned server.
What did I do wrong?
Continue reading...