Tuesday, October 4, 2016

Per-user Software Restriction Policies work

One person had created a limited user in Windows 7 and (presumably) used the parental control features to only allow certain applications to run as that user. Upon updating to Windows 10, the control panel used for those limitations disappeared, but the whitelist remained in effect.

I guessed that the parental controls are implemented in Software Restriction Policies. This seems to be correct, since the Microsoft\Windows\safer key in the policies section of the user's Registry had information on the whitelisted apps. That's really interesting, because the Group Policy Editor doesn't show Software Restriction Policies in User Configuration like it does for Computer Configuration.

If I ever implement the non-Administrative Templates Group Policy parts in Policy Plus, I'll see about having SRP work for both machines and individual users.

No comments:

Post a Comment