![]() The user I used to test has everything unblocked. I'm out of ideas why explorer is querying this folder for each start of programs.Īpplocker only blocks a few specific programs, like winrar for specific group of people (some internal requirements), rest if enabled. Things like winzip or word open without delay. This seems to happen only for non digitally signed programs. Using AppLocker, you can: Define rules based on file attributes derived from the digital signature, including the publisher, product name, file name, and file version. The querydirectory repeats for the ~10 seconds, that match the delay of starting the program. AppLocker helps administrators control how users can access and use files, such as executable files, packaged apps, scripts, Windows Installer files, and DLLs. I tried to do some troubleshooting (at first I thought it was a network problem) and through process monitor I noticed I get a lot of these before the process is createdĮxplorer.EXE CreateFile C:\Windows\System32\catroot\\*.cat It turned out that if I disable applocker on these servers there is no longer a delay and programs start up instantly. The tool enables you to manage which applications and files users can run. So I did that, added default rules for appx and didnt touch the rest.Īfter some days I get reports that starting some programs on Windows Server 2012 r2 is 10+ seconds slower than on the other servers. AppLocker is an application control feature found in enterprise editions of Windows. When I added ws2019 I had to update admx and open applocker gpo policy because it was missing appx default (allow) rules and it was blocking start menu and other things. We had applocker through gpo running on Windows Servers 2008 r2, 2012 r2 and now added 2019. ![]() Maybe someone experienced similar problem or have any idea what else to check. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |