I was asked if we can restrict who can run our DVR software to look at cameras. Now only people authorized have it installed but what if someone needs to be quickly removed from access or we want to prevent a smart employee from finding the installer and figuring out how to install and configure it? Or prevent rogue admins from abusing it, etc...
So in default domain policy I create a software restriction policy to disallow the path to the two different DVR softwares we use for our various locations. This works as I get a "Software restricted" pop up trying to run them... great!
Now I created the Allow DVR Software group policy and in Security filtering I added the handful of people allowed to use the software, including myself for testing. I did gpupdate /force and in rsop.msc I see the policy applied, however I am still getting the...