GPO & RSOP

[kidlim]

Hi,

I am new in this forum. Need some assistance on gpo & RSOP.

I have a gpo that disallows yahoomessenger (together with a whole list of other applications that are also not permitted to run) to execute under software restriction policies by addition hash rules & paths. Now I need to just re-enable back yahoomessenger only. I have created a new gpo that does that, however, it just does not seem to work. My understanding is that the new gpo will override the old Hash entry and replaced with the unrestricted value which should allow YM to run. I am not seeing it in this case. My RSOP results shows two entries - one disallowed, the other unrestricted. It seems strange to me that RSOP is not showing the final value. I am not sure what went wrong or how to proceed from here. Appreciate if anyone could advise and help. Thanks in advance. I have attached my rsop results.

Thanks.

[allen2]

If you're in an AD context you should deny the "read" right on the gpo disabling yahoo to the computer(s) that should run yahoo. A "counter" gpo, as you did, might not be needed as there are no software restriction by default, but if you need one then you'll need to enable at least gpo loopback processing and set it to replace.