Resolved Software restriction policy

I've had MS pagedefrag installed for a long time and use it infrequently.

On trying to use it recently, the system protests, telling me that it has been prevented by a software restriction policy, and refers me to Event Viewer.

Event viewer says that the Event ID is 866 and "policy rule {4b0a332b-5ee5-4907-9a8f-d27deceea287} placed on path pagedfrg.exe" which means absolutely nothing to me.

How can I remove the restriction?

Thank you.

 

If your computer is joined to a Domain (it is a work computer), it might be governed by Group Policy.

Anyway, there seems to be a restrictive policy imposed. If you are not an administrator of the computer, you will have to ask an administrator if the policy can be taken off.

That is what I expect is meant by "policy ".

Check that your antimalware is up to date. There are free online antimalware checks (like TrendMicro) if you want a second opinion.

Matt

 

No, my machine is not part of a group.

My anti-malware programs are up to date, and I use on-line scanners too.

 

Here's a link which gives great detail: http://www.infopeople.org/training/... to Protect Against Unauthorized Software.pdf

Cheers Neil.

 

Thank you Neil, but that doesn't help me.

There's a great deal of information there but I don't understand any of it. There are two things which I though may help, dsa.msc and secpol.msc, but my system doesn't recognise either of them - says it can't find them.

What to do next?

 

Than you Evan.

When I type either of those, I get the message Windows cannot find 'gpedit.msc'. Make sure you typed etc etc ...

 

Ok, thank you Evan.

Found it in:

HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths


For the entry:

4b0a332b-5ee5-4907-9a8f-d27deceea287


The right hand panel said:


Default REG_SZ (value not set)

Description REG_SZ WSS Blocked Defrag App

ItemData REG_SZ pagedfrg.exe

LastModified REG_QWORD d0 70 6b cc fd a2 cb 01

SaferFlags REG_DWORD 0x00000000 (0



What should I change? Or should I just delete the entry?

 

I deleted that registry entry. Rebooted, and clicked on Microsoft's pagedfrg.exe again.

Same result! There's a new regisry entry. Only difference is that the registry entry has a completely new alpha-numerical name.

Doesn't seem much point in deleting it again.

So, any idea what I can do now?

 

Yes, I did check all four.

I have just checked again and found the entry for pagedfrg.exe in only once, and in the same directory.

I have deleted it but the restriction is still active.

 

Yes, I did this after writing my last entry. Sorry I should have waited until I'd done it.

I restored to the oldest date for which I have a restore point, a week and a half ago, but that didn't help either.

 

Solved.

I had installed, and forgotten about, EMET, see http://www.microsoft.com/downloads/...FamilyID=c6f0a6ee-05ac-4eb6-acd0-362559fd2f04

I just discovered/remembered it. I couldn't see any way to change settings (strange), so I uninstalled it and deleted the registry entry which stopped the defrag program from running.

Than you for your time and interest.