Software restriction polices

good morning,

we have domain controller in windows server 2012 r2.

we test because have strange things.

we create ou "tests" and link 2 user gpo run powershell script on user logon. script create file in c:\temp.

the 2 file create.

then create new user gpo software restriction polices block powershell.

on ou have 2 user gpo create file , user gpo block powershell. linked group policy objects :

1. gpo create file 1

2. gpo software restriction polices

3. gpo create file 2

when log in, no file create. it's order not applied. should create "file 2" nothing. on event viewer of client computer, see warning "softwarerestrictionpolicy" access powershell.exe

we understood gpo create file 1 not applied don't understood why gpo create file 2 not applied.

carn please ?

thank , have nice afternoon.
best regards

> 1. gpo create file 1

> 2. gpo software restriction polices

> 3. gpo create file 2

 

this order not matter in case. gpo processing consists

of several components, called client side extensions. these cses

called in defined order, , each cse receives gpos has

settings it.

 

https://technet.microsoft.com/library/cc772100.aspx has (little)

information on that.

 

so since srp cse called way before scripts, srp blocks

powershell. later scripts cse tries run powershell,

already blocked, none of scripts can execute.

 

Windows Server  >  Group Policy