Group Policy/Program Compatibility Assistant/PCA

Since installing an app that ran in build 9841 and 9860. In build 9879, I'm get the PCA pop up. Read up on how to turn off the PCA using GP but it doesn't work in W10TP.
A little more reading and I disabled the PCA services and it still pops up! Found the service in the registry, Start D Word value of 4 which is disabled yet the bugger still run!
Here's a direct link to the app, it should open asking for a key code but I don't even get that far: WRSA I have submitted a support ticket with them as well. Being W10TP,
not sure how much response I'll get.
Bill

Hi wptski,
For your issue, I tested with your sample application, it seems the PAC is still running background after I disable this service, can you give us more samples?
So that I can summary these cases and submit a feedback.
Alex Zhao
TechNet Community Support

Similar Messages

Program Compatibility Assistant popping up after running and closing .EXE flash created by adobe cap

Hi,
I am using windows 7. I have a .Exe flash file created using Adobe Captivate. I have closed the file after running it successfully. Then this message popped up.
Why this message is coming even after successful playing of flash? Is there any way to avoid this?

Hello there,
Are you using Captivate version 5 or 5.5? Do you know the version of Flash Player Installed? I have not seen this message appear any time, can you please confirm in one more machine? What flavor of Win 7 do you have?
Thanks,
Vish

I am trying to download Firefox to my new computer. Every attempt to download brings up the Program Compatibility Assistant at the end of the download. I click reinstall using recommended settings but it does not fix the problem.

HP Pavilion HPE Series h8-1010
Windows 7 Home 64 bit

Thank you, the step where I went to tools, options and then selected a product for the application worked. It was a problem with .pdf files. I don't understand how all of a sudden it changed from what had worked all along, but, I changed it back from xps viewer to adobe and all is working fine.
I appreciate your help!

ConfigMgr 2012 R2 client on Windows 7 SP1 x86 causes "Program Compatibility Assistant" to appear

After I upgraded to R2 I am seeing the message below on newly installed Windows 7 SP1 x86 machines when I go to Control Panel and open the Configuration Manager Properties and then close it. This seems to only happen on 32-bit Win7 not on 64-bit.
I have created a new package for the client from definition and I also tried building new images using my Build and Capture task sequences. In this case I get the same message on the x86 Windows 7 SP1 machine if I log on after the Build & Capture is
done. My Build And Capture sequences uses the RTM-image for Windows 7 SP1 that has been patched using Offline Servicing.
Has anyone else seen this? Everything is working normally on the clients and if I click "This control panel works correctly" the message goes away. However, if I click "Open the control panel using recommended settings" that results in
admin-rights being required to open the Configuration Manager Properties under the Control Panel.
Regards,
Carl

I just pinged the product team and they are not aware of this issue at all so please someone open a support case with CSS where the issue can be worked.
Jason | http://blog.configmgrftw.com
I'll be opening a support case first thing monday :)
Tim Nilimaa | Blog: http://infoworks.tv | Twitter: @timnilimaa
Hi Tim
How did you go with this? We're still seeing this issue migrating Windows 7 x86 machines from the ConfigMgr 2007 SP2 R3/ConfigMgr 2012 client to the ConfigMgr 2012 R2 client in multiple environments.
Cheers
Sam
Ticket opened with Microsoft Support, still no fix but I will keep you all posted.
Tim Nilimaa | Blog: http://infoworks.tv | Twitter: @timnilimaa

I can't turn windows program compatibility off

I enabled "turn off application compatibility engine" and "turn off program compatibility assistant" in computer configuration (through group policy edit) and also "turn off program compatibility assistant" in user configuration,
and still when I try to install visual studio it says: "Windows Program Compatibility mode is on. Turn it off and then try Setup again". where should I turn off windows program compatibility? once I enabled "remove program compatibility property
page" and now I don't have this page even after I disabled this setting. now how can I have this page back? Is there a command that I can use it in cmd to change these settings?

Hi,
Here is the workaround:
Rename the EXE accordingly:
Visual Studio 2012 Ultimate -> vs_ultimate.exe
Premium -> vs_premium.exe
Pro -> vs_professional.exe
Express for Web -> vns_full.exe
Express for Windows -> win8express_full.exe
Express for Desktop -> wdexpress_full.exe
http://connect.microsoft.com/VisualStudio/feedback/details/792132/visual-studio-2012-pro-wont-install-on-fresh-windows-8-1
Also, refer to this thread for more information:
http://social.msdn.microsoft.com/Forums/en-US/103cef36-e6ef-4393-86a2-3bd03fa90f48/windows-81-and-vs2012-sdk-get-error-windows-program-compatibility-mode-is-on-turn-it-off-and-then?forum=vssetup
Alex Zhao
TechNet Community Support

Any applicable\recommended Group Policy settings (Local & Domain) for configuring windows 8.1 "gold master image" for collection

Happy Friday everybody -
I'm working on implementing Microsoft RDS 2012\VDI for the folks here at work. I've read - online - a lot of articles on VDI and RDS 2012 - and have a working model that is working somewhat satisfactorily. I haven't seen much online about steps
I could take in Local Group Policy on my Windows 8.1 'gold image' - or for that matter Domain level group policy - that can assist in creating a better, more reliable/robust Windows 2012 VDI environment.
Anybody out there got any information or opinions or advice on Group Policy settings for VDI environments?
Thanks again, everyone!
Adrian
anr

Hi Adrian,
Thank you for posting in Windows Server Forum.
In regards to your issue you can refer beneath article for detail information.
1. Group Policy Best Practices for VDI Environments
2.Some Basic Group Policy Settings for VDI
Hope it helps!
Thanks.
Dharmesh Solanki

"This program is blocked by group policy"

Hi all.
I have searched Google a fair bit on this but shockingly I just can't find an actual answer. The Group Policy forum is where I should have started rather than finally come to :)
I am no genius with GP, I use it in the most basic ways in very small orgs. My users appear to all have the same problem, when they insert a removable media device that has software on it that might run or autorun, I get the "This program
is blocked by group policy, contact your admin" message. I don't believe this ccurs with removable media just as just plain USB storage sticks. So far the two examples I know of are for an Internet providers USB broadband mobility stick, and
another user that is using some Kodak products (SD card, camera, and even the Kodak CD I think).
Environment is 2008 R2, Win7 Pro workstations, all users are local admin on their machine. All users are in the default Users container, and all computers are in the Computer container. To my recollection I have never set a GPO that would directly
or indirectly cause all users problems like this. The only thing that has had indirect consequences that I know of in the past, was because we use many of the options available under Folder Redirection, including redirecting the Desktop. In some
cases, when a user has tried to launch an exe or what not that was on the desktop, it failed because it's trying to launch in truth on their user folder on the server, not really on the Windows Desktop. I'm not sure if that might impact my current problem.
To start, where can I go to actually check GPO's for this? Is this the Software Restriction Policy? If so, which one governs, the one in User Configuration or Copmputer Configuration? In both cases I went to GPMC and under both, it would
say I had to go to the Actions menu to create a New Software Restriction policy. I did so (just picking the item in the Actions menu), and the resutlt was some choices under the actual GPO now, none of which I've yet configured.
So, I need to torublesahoot this ut also to know where such a thing causing this error message would be set under normal circumstances. Also, could antivirus cause this? I can't see the error saying "group policy" if it did though.
Thank you very much.

Hi,
Thanks for posting your issue in the forum.
Based on your description, I suspect that maybe Software Restriction Policy has been configured in the domain. At this time, I suggest we could try to collect the following information to narrow
down the cause of the issue.
GPMC.log
==================
a. On domain controller, click Start ->Run, type GPMC.MSC, it will load the GPMC console.
b. Right click on "Group Policy Result" and choose wizard to generate a report for the problematic computer and user account (please place appropriately). (Choose computer and select the proper
user in the wizard)
c. Right click
the resulting group policy result and click the "Save Report…" => save report to save the report to a HTML file.
Once we get the report, please check if the Software Restriction Policy has been configured and applied to the problematic computers and users. If so, please disable the policy setting to see
if the issue persists.
In addition, please try to refer to the following articles for detailed information about Software Restriction Policy and how to troubleshoot Group Policy problems.
Software Restriction Policies
http://technet.microsoft.com/en-us/library/hh831534.aspx
Troubleshooting Group Policy Problems
http://technet.microsoft.com/en-us/library/cc787386(v=ws.10).aspx
Hope this helps.
Best Regards,
Andy Qi
TechNet Subscriber Support
If you are
TechNet Subscription user and have any feedback
on our support quality, please send your feedback here.
Andy Qi
TechNet Community Support

Programs Blocked by Group Policy - But Why?

Hi, I'm hoping someone can help with this... I'm an IT technician and one of my clients has suddenly experienced an issue whereby they can no longer execute two programs without right clicking and selecting "Run As Administrator". This happened
"out of the blue" and without any warning or trigger event. The user has been running this same configuration for months before this issue started happening. The only possible event was the user reported possibly running some sort of malware from
an email attachment they thought was safe but later determined it came from an unknown source. HOWEVER, all current virus and malware scans come up clean.
If they just click the icon and do a normal execute they receive the message "Program blocked by Group Policy". They are on a domain, however, there have been NO changes to any of the group policies AND no other users are experiencing the issue
despite the fact all the users are contained in the same security group on the domain controller.
The two programs this user can no longer execute, without elevation, are: AVG Antivirus Business edition and Symantec PC Anywhere.
I've been all over google and made some recommended changes via gpedit.msc but nothing has helped so far. I also did a gpupdate and tried turning UAC on and off but the behaivor is the same regardless of the state of UAC.
Anyone have any suggestions? Thanks much,
--Rick

The mailware may have put in a registry entry under policies that is
causing yuor behaviour.
As a last resort you could try this:
Logon as an Administrator
Navigate to HKLM\Software\Policies and nose around to see if anything
there might be the cause.
Next, Navigate to
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies and do the
same.
If nothing jumps out at you, back up both of these registry keys then delete them and then
run GPUPDATE /FORCE and see if problem is still there.
If so, try all the above steps again, but this time use HKCU instead
of HKLM.
Rick G.1 wrote:
>
>
>Hi, I'm hoping someone can help with this... I'm an IT technician and one of my clients has suddenly experienced an issue whereby they can no longer execute two programs without right clicking and selecting "Run As Administrator". This happened
"out of the blue" and without any warning or trigger event. The user has been running this same configuration for months before this issue started happening. The only possible event was the user reported possibly running some sort of malware from
an email attachment they thought was safe but later determined it came from an unknown source. HOWEVER, all current virus and malware scans come up clean.
>
>If they just click the icon and do a normal execute they receive the message "Program blocked by Group Policy". They are on a domain, however, there have been NO changes to any of the group policies AND no other users are experiencing the
issue despite the fact all the users are contained in the same security group on the domain controller.
>
>The two programs this user can no longer execute, without elevation, are: AVG Antivirus Business edition and Symantec PC Anywhere.
>
>I've been all over google and made some recommended changes via gpedit.msc but nothing has helped so far. I also did a gpupdate and tried turning UAC on and off but the behaivor is the same regardless of the state of UAC.
>
>Anyone have any suggestions? Thanks much,
>
>--Rick
>
>
>
Ha®®y

How to control IE10's "Compatibility View settings" via Group Policy

First
of all thanks for taking the time to read this. I must let you know that I have limited experience with Group Policy so here it goes...
Domain Controllers are 2008 R2 Datacenter and client computers are Win7 Pro with IE10
I need to add several sites to the "Compatibility View settings" in IE10 and have these pushed out via Group Policy.
I followed this to enable the "Use Policy List of Internet Explorer 7 sites:"
Use
Policy List of Internet Explorer 7 sites
I even added the settings to both User Configuration as well as Computer Configuration. However the computers on the domain wouldn't show these sites in
IE even after forcing a GP update (gpupdate /force)
Yes I did use top level domain names.
Next I installed the Administrative Templates for Windows Internet Explorer 10 on the DC:
Administrative Templates for Windows Internet Explorer 10
this gave me an Inetres.adm file while I put in the same location as my other .adm files that Group Policy Manager sees (located at C:\Windows\SYSVOL\domain\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm)
I do see a bunch of .ADMX files located at C:\Windows\PolicyDefinitions
on the DC. I also see a lot of .ADML files located at C:\Windows\PolicyDefinitions\en-US.
Where is my Central Store located that my Group Policy references? How do I know what location GP is reading from?
Now I installed the Administrative Templates (ADMX) for Windows Server 2008 R2 and Windows 7 from here:
Administrative Templates (ADMX) for Windows Server 2008 R2 and
Windows 7
This gave me a "Win7-2008R2-admx.msi" package that I installed. I took the defaults and extracted contents to:
C:\Windows\PolicyDefinitions\Server 2008 Win7\PolicyDefinitions
Are all of these .ADMX files supposed to be placed into my Central Store?
If I mouse-over "Administrative Templates" in Group Policy Manager is says that the policy definitions are retrieved from the local machine.
I then right-clicked on top of "Administrative
Templates" in Group Policy Manager and highlighted Inetres and selected Delete.
While in Add/Remove Templates I click on Add and it defaults to looking for "Policy Templates" and will not let me select and .ADM/.ADML/.ADMX files.
What am I doing wrong here?
How do I know that I'm using the most recent Inetres file?
How do I know which file Group Policy Manager is using to manage the IE settings that are in:
User Configuration->Administrative Templates->Windows Components->Internet Explorer->Compatibility View->Use Policy List of Internet
Explorer 7 sites
or
Computer Configuration->Administrative Templates->Windows Components->Internet Explorer->Compatibility View->Use Policy List of
Internet Explorer 7 sites.
Is there anything else you can suggest?
Many, many thanks in advance for any response

Hi,
Regarding your question, usually we create a Central Store for Administrative Templates (Both .admx and .adml files), and create a folder that is named PolicyDefinitions in the following location:
\\FQDN\SYSVOL\FQDN\policies. The .adml files on the Windows computer
are stored in a language-specific folder. For example, English (United States) .adml files are stored in a folder that is named "en-US." When you have copied all .admx and .adml files, the PolicyDefinitions folder on the domain controller should contain the
.admx files and one or more folders that contain language-specific .adml files.
Please refer to the following articles. You will get more helpful details about the Central Store for Group Policy Administrative Template files.
How to create the Central Store for Group Policy Administrative Template files in Windows Vista
http://support.microsoft.com/kb/929841
Windows 7, Windows Server 2008 R2 and the Group Policy Central Store
http://blogs.technet.com/b/askds/archive/2009/12/09/windows-7-windows-server-2008-r2-and-the-group-policy-central-store.aspx
Based on your description, I understand you enable the setting “Use Policy List of Internet Explorer 7 sites”. However, didn’t show any sites in IE in client even after forcing a GP update
(gpupdate /force). Please use command “gpresult” in clients to collect the GPOs, and then check whether the GPO contain the setting “Use Policy List of Internet Explorer 7 sites” was applied to clients or wasn’t.
In addition, you also can change the related setting by using registry directly.
Follow the path of the registry:
HKEY_CURRENT_USER->Software->Policies->Microsoft->Internet Explorer->BrowserEmulation->PolicyList. (Create registry folders
manually if not present)
Right Click
PolicyList ->New->String Value->Enter the name of the website. (Both under ‘Name’ and ‘Data’. For example,
Value name: example.com Value data: example.com)
There is a similar question, please read as a reference.
Add manually URL on Compatibility View List in IE10
http://social.msdn.microsoft.com/Forums/ie/en-US/5a15e861-d106-471e-a968-fdea15e31c45/add-manually-url-on-compatibility-view-list-in-ie10
Hope this helps.
Best regards,
Justin Gu

Can't find setting for IE10 Compatibility View in Group Policy Management Console.

Hoping this is easy.
I'm trying to use the Group Policy setting for Compatibility View under Computer Configuration/Administrative Templates/Windows Components/Internet Explorer and it is not there.
The domain controllers are 2008 Standard SP2, so not R2. We are using ADMX files from a central store.
If I open the local GPEdit on my Windows 7 workstation I can see the setting for Compatibility View but cannot see it using RSAT or on the domain controllers themselves.
How do I get this setting to appear so I can use it?
Thank you.
Kenny

> If I open the local GPEdit on my Windows 7 workstation I can see the
> setting for Compatibility View but cannot see it using RSAT or on the
> domain controllers themselves.
Copy %windir%\policydefinitions from your win7 WS to the central store:
robocopy "%windir%\policydefinitions"
"\\%userdnsdomain%\sysvol\%userdnsdomain%\policies\policydefinitions" /s
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Pin Programs on the Windows 7 Taskbar & Start Menu with Group Policy (Windows Server 2008 R2)

Dear ALL,
I want to Pin Programs on the Windows 7 Taskbar & Start Menu with Group Policy (Windows Server 2008 R2) as per below description. Can someone please help me how to proceed and achieve this.
Pin the following applications to the Taskbar:
Outlook
Pin the following applications to the Start Menu:
Outlook
Excel
Word
Internet Explorer
Software Center
Regards,
Amit Kumar Rao

https://www.google.de/search?q=windows+7+pin+to+taskbar+vbs
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Group Policy not populating IE11's compatibility sites.

We normally do not allow IE updates, but we got a pallet of new computers with IE11 preinstalled on them from Dell. I figured now is a good time to get this working in our environment.
The issue is that under our group policy settings are not putting the websites we need in compatibility mode. I have verified the group policy is applied to my computer using rsop.msc and I verified the settings in there. However when
I try to visit our loan application which runs at http://192.168.1.9 it shows a browser not supported message and says to use IE 5.5 or later. Well if one were to manually add the site in compatibility mode, then it would work. So we want to avoid
the calls to IT Support on how to add sites to compatibility mode and just control it from our end via Group Policy.
So under User Configuration > Policies > Administrative Templates > Windows Components > Internet Explorer > Compatibility View : we have these set:
Include updated Web site lists from Microsoft - Enabled
Use Policy List of Internet Explorer 7 sites - Enabled
Show:
http://192.168.1.9 (our lending application)
https://another website
http://192.168.1.15 (our lending application test site for new upcoming releases)

Hi,
The site list deployed using administrative template might not be visible in IE user interface. We could see the sites loading in the compatibility mode by opening the developer tool bar (press F12) and checking the browser mode.
Also, we can verify the setting in the client machine registry. The configuration is written to registry under HKCU(HKLM)\Software\[Wow6432Node]\Policies\Microsoft\Internet Explorer\BrowserEmulation\PolicyList. More information, please see
this blog:
How to add web site to Compatibility View List via GPO
In addition, we need to configure the "Turn on Internet Explorer Standards
mode for Local Intranet" policy and set it to disable.
For the “Use
Policy List of Internet Explorer 7 sites”
policy: We need to add Top level domain names in the
policy settings. Reference: Compatibility List FAQ
Some more information:
Missing the Compatibility View Button
Hope this helps
Best regards
Michael Shao
TechNet Community Support

Programs Won't Uninstall With Group Policy

Thanks for the constant Adobe Flash updates, I'm constantly uninstalling one version, then installing the new version of Flash. I use a separate GPO for each version.
Occasionally, a version doesn't uninstall. I'll remove computers from the Security group tied to the GPO and / or remove the policy from the GPO.
But the program's "stuck" if you run rsop.msc and remains as an installed program. This "stuck mode" seems to block the installation of any other program via Group Policy. Even if you uninstalled it manually, it'd still show up
in rsop.msc
So far, my only recourse has been to remove the computer from the domain and re-add it.
I'm looking for a less tedious method. Anyone know a way to force an uninstall and clear it out so it doesn't appear when you run rsop.msc.
Thanks!

Hi,
Before going further, for group policy software installation, to remove a published or assigned package, we can choose to click
Immediately uninstall the software from users and computers to uninstall deployed software when removing the package.
Regarding this point, we can refer to
Remove a package section in the following article.
How to use Group Policy to remotely install software in Windows Server 2008 and in Windows Server 2003
http://support.microsoft.com/kb/816102#method5
However, we can also utilize group policy to upgrade installed software based on previous deployed package, and we can choose to uninstall the existing package before installing
the upgrade package.
Regarding this point, the following article can be referred to for more information.
Upgrade an application
http://technet.microsoft.com/en-us/library/cc783421(v=ws.10).aspx
For we had removed the package, but the software didn’t get uninstalled, as a result, can we try redeploying the package, and then when we remove the redeployed package, we can
choose to immediately uninstall the software?
TechNetSubscriber Support
If you are TechNetSubscription user and have any feedback on our support quality, please send
your feedback here
Best regards,
Frank Shen

Group Policy not populating Compatibility View List in IE 11

I am currently a domain admin in a large, multi domain controller environment. Our AD was much out of date (2000 mix mode) and we are currently updating it in steps (2003 Native at this point)
At the same time other technicians have started patch testing, moving us from IE10 to IE11. However, there seems to be one major catch so far. Users require access to a website that will only run properly in compatibility mode. This was true in IE10 and
is true in IE11.
As such, this website was set as a mandatory compatibility mode page in GPO (Administrative Tempaltes\Windows Components\Internet Explorer\Compatibility View\Use Policy List of Internet Explorer 7 sites). This has worked fine for 8, 9, 10 for this site and
others.
However, it was not showing in compatibility mode in IE 11 it is showing in normal mode and breaks. The policy is applying normally and the list is accurate in rsop.msc. If the site is added to compatibility mode locally inside IE11 it works fine.
Our patch testers are all seeing the same problem. However, I have been unable to establish if it is just this site or others are affected (mostly it's old billing and intranet sites I don't have access to).
I'm not sure what the disconnect is.

Hi,
There are also more modes. The detailed information is below:
•Via X-UA-compatible meta tag: The webpage developer used a meta tag to specify a legacy document mode.
•compatible HTTP header: The web server has requested a legacy document mode via an HTTP header.
•Via local compatibility view settings: The site was manually added to the Compatibility View settings.
•Via the compatibility view list: The site is on Microsoft's Compatibility View list.
•Via intranet compatibility settings: The "Display intranet sites in Compatibility View" box is checked in the Compatibility View settings.
please remove all website from "Use Policy List of Internet Explorer 7 sites" list.
Remember to run "gpupdate /force" command to apply the new group policy object.
Then open the websites, click F12 key, check their Document mode status.
Based on my test, this is also related with web itself. it will adjust status according to its design.
Karen Hu
TechNet Community Support

Cannot install program after begin removed from Group Policy published programs

Hello,
We recently attempted to publish a program through Group Policy to allow users to install it but due to some requirements of the installer, it did not work. We removed it as a published program and now someone who attempted to install it through that method
cannot install the program at all. When they attempt to run the MSI from their local machine (not from a server share) they get an error saying "The feature you are trying to use is on a network resource that is unavailable". We tried putting a copy
of the MSI in the network location it was looking for (which is where it was when it was a published program) and ran in to the same errors as before when it was a published program.
When we ran the installer as a different user that had admin access the program installed correctly and without issue. To avoid having to run as a different user in case the computer only has one admin account, is there a way to clear the user account's
memory of the msi or something?
Thanks.

Hi,
Based on my knowledge, deployed msi application will be installed before the computer allows a user to logon if you choose Assign. Otherwise, you need to use Control Panel\Programs\Programs and Features\install a program from internet to get the msi
installed.
Did you mean to deploy a MSI file to each computers? Is it not the method written in this KB?
How to use Group Policy to remotely install software in Windows Server 2008 and in Windows Server 2003
https://support.microsoft.com/kb/816102?wa=wsignin1.0#method6
If you just deploy a file from a shared network location, make sure that all your users has the permission to access the Network location.
Also, please check the policy under Applocker if there is any policy block the installation of MSI for your domain user except the admin account.
Kate Li
TechNet Community Support

Group Policy/Program Compatibility Assistant/PCA

Similar Messages

Maybe you are looking for