Applocker Policy Preventing Apps From Downloading During Imaging

Hi all! I have run into an issue while deploying Windows 8.1 Enterprise using MDT 2013 with applocker policies applied. During testing I have had no issues with the default provisioned Store Apps but I have recently configured an applocker policy that will
prevent any apps from being installed other than those provided by Windows. When I test the policy on a running computer it appears that everything is working correctly - any of the original provisioned apps can be run or re-installed from the Store and any
other apps will not install.
With this policy applied when a machine images and joins the domain none of the provisioned apps will successfully download and install but instead they get an x in the lower right-hand corner. I have verified that the Applocker policy is the culprit by
disabling it and imaging a new computer which successfully installed the default apps. What is going on here? If the policy seems to work on a computer during normal operation why does it prevent the apps from initially downloading? Is this a bug in the way
Applocker works?
The policy is configured as such:
Executable Rules - Enforced Audit Only - Created default rules
Packaged App Rules - Enforced - Auto-created rules based on a machine with default configured apps
One workaround I am considering is to make sure the Applocker policy doesn't apply in the staging OU so the apps will download and be in a working state. These computers could then be moved to an OU with the Applocker policy linked so that it will begin
to prevent the installation of other apps. This is not a desirable method but could be a stop-gap until this bug is worked out.
Please let me know if there is any other info I can provide to make this issue clearer. Thanks!

Mr_bigworlds,
Thanks for the reply. I understand that this sounds like a Group Policy issue, but please understand that this policy seems to work as expected for a computer that is up and running but causes issues for a machine being deployed. This leads me to believe
that there is a component of the OS responsible for downloading and installing the packaged apps that is not compatible with the Applocker GPO settings. This is the reason I decided to post in the OS deployment forum. I will gladly try the GPO forum as well.

Similar Messages

  • Is there a way to prevent people from downloading under your Apple ID?

    Is there a way to prevent strangers from downloading content under my Apple ID? Don't they need to know my password or security answers to download an app?

    Don't give them your password.

  • How to prevent apps from syncing in the new version of itunes?

    Hey there.
    I brang my macbook to Applestore cause it had a problem and they downloaded the latest version of itunes. Everything's fine and my music, videos and apps are in the new itunes like before. But now, when I want to sync my iphone, a pop window asks me to give the password of the itunes account I used to download some of my apps or it will delete them and their data. The problem is that one of these accounts is an old friend's one and I actually lost all contact with him. So basically now I can't sync my iphone at all or it will delete all my apps.
    Has anyone any idea how to sort that out? Or at least knows how to prevent apps from syncing in this new version of itunes?
    Thanks for your help

    Onthe top menu
    View > Show Status Bar.
    The grey bar will now appear at the bottom with the info you want

  • How can I prevent apps from syncing in the new iTunes?

    Hey there.
    I brang my macbook to Applestore cause it had a problem and they downloaded the latest version of itunes. Everything's fine and my music, videos and apps are in the new itunes like before. But now, when I want to sync my ipod touch, a pop window asks me to give the password of the itunes account I used to download some of my apps or it will delete them and their data. The problem is that one of these accounts is an old friend's one and I actually lost all contact with him. So basically now I can't sync my iphone at all or it will delete all my apps.
    Has anyone any idea how to sort that out? Or at least knows how to prevent apps from syncing in this new version of itunes?
    Thanks for your help

    Double tap the Home button...slide the last used view of the app(above the icon) up. Tap Home button when finished.

  • Web Gallery: Preventing Users from Downloading Photos

    Hi,
    Ive recently uploaded a web gallery (wedding pictures) from iPhoto and I need to secure it. So far Ive password protected the web gallery, so that it is not accessible to the public. Ive also checked the option to prevent people from downloading pictures.
    When I login to the Gallery, I find the "Download" button for each picture is greyed out, but then there is nothing stopping me from right-clicking on the image and saving it to the hard drive. Is there something Im missing here, or is this a bug in the Web Gallery?
    Mark

    Mark:
    As already pointed out there's no way from stopping viewers from taking screenshots of your photos. You can, however, add a watermark to your photos to identify the owner. You can use an image editor like Photoshop Elements (used in the example) or one of the many watermarking applications available. Go to VersionTracker.com and do a search for watermark to find the various candidates.
    TIP: For insurance against the iPhoto database corruption that many users have experienced I recommend making a backup copy of the Library6.iPhoto database file and keep it current. If problems crop up where iPhoto suddenly can't see any photos or thinks there are no photos in the library, replacing the working Library6.iPhoto file with the backup will often get the library back. By keeping it current I mean backup after each import and/or any serious editing or work on books, slideshows, calendars, cards, etc. That insures that if a problem pops up and you do need to replace the database file, you'll retain all those efforts. It doesn't take long to make the backup and it's good insurance.
    I've created an Automator workflow application (requires Tiger), iPhoto dB File Backup, that will copy the selected Library6.iPhoto file from your iPhoto Library folder to the Pictures folder, replacing any previous version of it. It's compatible with iPhoto 08 libraries and Leopard. iPhoto does not have to be closed to run the application, just idle. You can download it at Toad's Cellar. Be sure to read the Read Me pdf file.

  • What is adobe autoanalyzer and how do i quit the application? it's preventing me from downloading an

    what is adobe autoanalyzer and how do i quit the application? it's preventing me from downloading and installing updates to elements 11 and camera raw

    To quit Auto analyser, open task manager/Activity monitor and look for 'ElementsAutoAnalyzer' and kill this process/exe.
    Auto analyser is an exe used by Organizer for performing 'media analysis' (assigning smart tags to images).
    ~Andromeda

  • How can i prevent mail from downloading the same messages over and over again?

    is there any way to prevent Mail from downloading the same messages over and over again? Mail has a minimum of "50 recent messages" to download, but i hate having to delete them every time i check for new mail! why doesn't the program remember if you have already downloaded a message, and suppress any subsequent downloads???

    Same issue since Mavericks.

  • Is there a way to prevent apps from reopening on startup?

    I like to shut my computer down without closing each app but I don't want to have them all reopen on start up.
    Is there a way to prevent apps from reopening on startup without having to close them all before shutting down?
    I found the checkbox to prevent apps from opening in their previous state but they still open to their previous state after a restart.
    Thank you in advance,
    christos

    Start at http://reviews.cnet.com/8301-13727_7-20083707-263/managing-mac-os-x-lions-applic ation-resume-feature/?tag=mncol;title

  • TS1424 I have already downloaded wrath of the titans and watched it through but a download of the movie in the iTunes store still remains and also keeps timing out? This is preventing me from downloading any other movies onto my iPad any suggestions?

    I have already downloaded wrath of the titans and watched it through but a download of the movie in the iTunes store still remains and also keeps timing out? This is preventing me from downloading any other movies onto my iPad any suggestions?

    no, i had to leave so i logged out and when i opened itunes on my mac and went into the downloads tab it only had one paused download listed. i resumed the download for the one movie listed and the other one never showed up. its been about two weeks since i initially bought the two movies so i figured something was wrong.

  • "A duplicate file name was specified", why is this poping up and preventing me from downloading from iTunes.

    "A duplicate file name was specified", why is this poping up and preventing me from downloading from iTunes.

    Try looking for and/or deleting incomplete downloads from the the iTunes Media folder. Then try downloading again, so its not resuming or overwriting a previous download.
    Apple does have this article that talks about a very similar syncing error -> iTunes: Troubleshooting issues with third-party iTunes plug-ins.
    WTH.

  • Apparently my security settings are preventing me from downloading creative cloud.  Any suggestions?

    Apparently my security settings are preventing me from downloading creative cloud.  Any suggestions?

    Nobody can tell you anything. You have not provided any system info nor told us what alleged "security settings" are interfering or for that matter what warnings you get.
    Mylenium

  • What is "Error 2379 which is preventing me from downloading Adobe Reader?

    What is "Error 2379" which is preventing me from downloading Adobe Reader?
    I operate on Windows 7.

    Pat,
    I can find no such folder on the C: drive.
    I have managed to restore my original Adobe Reader by restoring my system to its condition a couple of weeks back before the problem occurred. (My problem occurred when I tried to update the Adobe Reader.) This original version of Adobe Reader works O.K. again so I'm loath to risk uninstalling it - which is what I was asked to do when I tried running your suggested program' below!
    Smudge.

  • Prevent user from download my PDF file on JSP page

    I'm developing a web application using JSP, html, and javascript. I would like to prevent user from download my PDF file and only able to open on browser and read.
    How can i do that?
    Thanks!

    opening and reading involves a download.
    So i dont think you cant prevent that.

  • New ios device - prevent apps from automatically being downloaded

    Hi.
    I dont want any apps being automatically downloaded on a new iphone.  When ever I have previously signedin with my apple id on a new device, all my old app get downloaded.  This is a little annoying and slows down the device loads while it downloading 100+ app
    Any help would be great.
    Thanks
    James

    wow, thanks for the quick reply!  I did see that but i thought it just for new app so they get syned with other deviced. 
    If i dont want old apps being downloaded but dont mind new apps syned is that possible?
    Also - I will test and then mark this as answered.  Thanks again

  • Are App Store Downloads Disk Images?

    Pardon the ignorance but I have never used the App Store.
    I assumed that the apps you downloaded would be in the form of disk images (.dmg) but something I read recently suggested that this wasn't the case and the apps were simply downloaded and automatically installed on your computer rather like Software Updates in Leopard and SL.
    If this is the case, it appears that if your computer is erased or replaced, the app will need downloading again, which I assume will be easy (and free!) as the App Store should have the record of the original sale.
    Is that correct?
    However, you are usually allowed to have one copy on a desktop and another on a laptop. How does one go about that?
    If the app is a simple self-contained one it should be easy enough to drag and drop it to the second computer, but that won't work with more complex apps that use various "hidden" files or folders.
    I have always made backup hard copies (DVDs) of all my apps for obvious security reasons and it appears that this will no longer be possible . . . . or will it?
    Software Updates can be copied by whipping them out of the Updates folder before they have a chance to be intalled (and the installer deleted).
    Can a similar technique be used with App Store downloads . . . . . . . . or is that something I shouldn't be asking?

    Hi,
    If you need to re download an app follow the instructions here.
    http://support.apple.com/kb/HT2519
    You can download the same app to multiple Macs without extra charge.
    Updates for apps you download from the MAS will be available in the top of the MAS window, not from Software Update. Reason being, they are from third party developers, not Apple.
    Always a good idea to backup any apps you install from the MAS to an external source for easy reinstall in case you need to reformat the drive they are stored on.
    Carolyn 

Maybe you are looking for