Yesterday I was at-the-office and for some reason my Domain Policy kicked in and first removed my Microsoft Office installation, afterwards trying to deploy it again. The deployment failed partially ending up in a misconfigured installation. I tryed to figure out what specifically was blocked from the Windows Eventviewer and ePO. They both indeed held the blocking events. But when I used the logged info to allow the installation (again by trusted directory) after a reboot it still was blocked.
Because I had limited time at that moment I went looking for a way to temporarily disable Application Control, and found that there is quite a nice way to do so: in ePO there is a client task type named "SC: Start Update Mode" and "SC: End Update Mode". They pretty much do what they say, Update Mode being a time window in which one is allowed to make changes to the system, so after starting the update mode on my computer I was simply able to recover the Office installation and it's running smooth now.
Afterwards I offcourse "ended" the Update Mode, and I will try to find out what is a more comprehensive way to allow AD deployed software.
No comments:
Post a Comment