0

So I know how to block an app via Software Restriction Policies >> Path and it works for files inside Program Files and System32.

What I want is to block the Metro Calculator via GPO >> Software Restriction Policy.

I found a folder under C:\Program Files\WindowsApps and blocked

number.exe but no luck.

Any Thoughts?

I do not want to use AppLocker as I have been told by Admin to use Software Restriction Policies.

Example: Software Restriction Policy Image

FreeSoftwareServers
  • 515
  • 1
  • 8
  • 26
  • you can only block older software with SRP - you would need to use the modern technology (APPLOCKER) "AppLocker is a new feature in Windows Server 2008 R2 and Windows 7 that advances the features and functionality of Software Restriction Policies. AppLocker contains new capabilities and extensions that allow you to create rules to allow or deny applications from running based on unique identities of files and to specify which users or groups can run those applications. " https://technet.microsoft.com/en-us/library/hh994606.aspx – Jim B Nov 19 '15 at 22:07
  • I'd ask your admin how the windows xp/2003 technology isn't outdated. – Jim B Nov 19 '15 at 23:37
  • Well I did some reading [Applocker vs Software restriction policy @ Server Fault](http://serverfault.com/questions/447078/applocker-vs-software-restriction-policy) and found that helpful, I don't think what I was asked to do is possible, I am only able to block the store via SRP, but I will accept your answer since it is the best option (and only!) Thanks – FreeSoftwareServers Nov 20 '15 at 05:04

2 Answers2

1

You must create an "Allow" rule and Allow All Metro Apps Via Publisher (select any app and slide enforcement rules to publishers) and add an exception for the App you wish to Block via Package name.

Detailed guide Here

FreeSoftwareServers
  • 515
  • 1
  • 8
  • 26
0

you need to use a packaged app rule, you cannot block an executable you need to block the application

Jim B
  • 24,081
  • 4
  • 36
  • 60
  • you mean for store apps? Because blocking executable via path is the only way I have blocked applications as of now. Could you elaborate a bit on packaged app rules? I read the only way to block store apps is via blocking the entire store, which is not what I am after, just a specific store app. – FreeSoftwareServers Nov 18 '15 at 03:00
  • See https://technet.microsoft.com/en-us/library/hh831350.aspx – Jim B Nov 18 '15 at 14:31
  • 1
    This is Applocker, I want to use Software Restriction Policies >> see https://technet.microsoft.com/en-us/magazine/2008.06.srp.aspx – FreeSoftwareServers Nov 19 '15 at 17:42