JSI Tip 8020. When you revoke permissions in the Software Installation GPO, users with roaming profiles can still install the advertised program?

This behavior occurs because Group Policy no longer has permissions on the .aas file in the Sysvol, so it can't remove the icon from the start menu, or remove the file associations.

To resolve this issue, use any of the following:

- Remove the program from the GPO.

- Remove the policy from the OU, if this policy is only for this Software Installation.

- Instead of filtering by using security on the package, filter the GPO.

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.