Windows 10: How to block EXE files from running using Group Policy in Windows 11/10

​

On Windows 11 or Windows 10 computers, PC users can apply stringent security measures like protect against and prevent Ransomware attacks & infections, block users from installing or running programs, and can use AppLocker to prevent users from installing or running applications. In this post, we walk you through the steps on how to block […]

This article How to block EXE files from running using Group Policy in Windows 11/10 first appeared on TheWindowsClub.com.

read more...

 

Some Group Policies not running on Windows 10

Having Problems with some Policies running. All of our other Machines are working no problem.

This Device is a MS Surface Pro X Bundle

• 
  
• Details:
  

- Active Directory is Windows Server 2012

• Symptoms
  
  - pushed apps aren't installing (Adobe Reader)
  
  - group policy refreshes are failing when running gpupdate /force
  
  - Error:
  
• Remediation attempts
  
  - ran sfc /scannow
  

- reset WMI

• Below is the GP Results
  
  ============================
  
  Microsoft Windows [Version 10.0.18362.997]
  
  (c) 2019 Microsoft Corporation. All rights reserved.
  
  C:\Users\administrator>gpresult /r
  
  Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
  
  © 2019 Microsoft Corporation. All rights reserved.
  
  Created on ?2020-?08-?11 at 11:51:05 AM
  
  RSOP data for Device
  
  -----------------------------------------------------------------
  
  OS Configuration: Member Workstation
  
  OS Version: 10.0.18362
  
  OS Build 19041.508
  
  Site Name: N/A
  
  Roaming Profile: N/A
  
  Local Profile: C:\Users\administrator
  
  Connected over a slow link?: No
  
  USER SETTINGS
  
  --------------
  
  CN=Administrator,CN=Users,DC=woolwich,DC=tow
  
  Last time Group Policy was applied: 2020-09-11 at 11:04:42 AM
  
  Group Policy was applied from: TOWDC2
  
  Group Policy slow link threshold: 500 kbps
  
  Domain Name: WOOLWICH
  
  Domain Type: Windows 2008 or later
  
  Applied Group Policy Objects
  
  -----------------------------
  
  Corp GP
  
  eDocs Network Binding
  
  Default Domain Policy
  
  The following GPOs were not applied because they were filtered out
  
  -------------------------------------------------------------------
  
  Block Op Staff Internet Access
  
  Filtering: Denied (Security)
  
  Local Group Policy
  
  Filtering: Not Applied (Empty)
  
  The user is a part of the following security groups
  
  ---------------------------------------------------
  
  Domain Users
  
  Everyone
  
  BUILTIN\Users
  
  BUILTIN\Administrators
  
  NT AUTHORITY\INTERACTIVE
  
  CONSOLE LOGON
  
  NT AUTHORITY\Authenticated Users
  
  This Organization
  
  LOCAL
  
  Domain Admins
  
  Citrix_Remote Desktop
  
  Rec&Fac_fdr
  
  DR4100 Access
  
  eSCRIBEAdministrators
  
  Group Policy Creator Owners
  
  Exchange Servers
  
  Schema Admins
  
  Exchange View-Only Administrators
  
  Enterprise Admins
  
  Exchange Public Folder Administrators
  
  Exchange Recipient Administrators
  
  Exchange Organization Administrators
  
  Authentication authority asserted identity
  
  Denied RODC Password Replication Group
  
  CERTSVC_DCOM_ACCESS
  
  SQLServer2005MSSQLUser$TOWDC1$BKUPEXEC
  
  High Mandatory Level
  

 

IE 11 cannot run .exe files downloaded

Hello,

Within the last few weeks we have 2 machines in a domain environment that will not run any .exe files that have been downloaded using IE. There is no error, the application just simply doesn't run. We are testing with the gotomeeting client.

domain: 2012r2

workstation: windows 10 ver 1803

internet explorer: 11

There is no software restriction policy in place. machines have bitdefender endpoint security tools and logs show nothing there is blocking it.

.exe files download run fine in chrome and edge. We have tried all the steps in any google search results and have not yet had a solution. We are looking for some help from the MS community.

 

GROUP POLICIES IN WINDOWS 10

You can change Group Policies by opening Group Policy Editor first. You can open it by following these steps:

• Log in an administrator account. If you are already logged in as an administrator, proceed to step 2.
  
• Press Windows + R to open Run.
• Type gpedit.msc and press Enter.
  

After opening Group Policy Editor, you can now make the necessary changes that you want.

Should you have more concerns, feel free to post.

Regards.