I'm running a Windows Server 2022 setup with TSplus Terminal Services, and I've configured AppLocker with some executable rules to block EXCEL.EXE for a certain security group. However, after enabling these deny rules, I've noticed that the Windows taskbar stops working for all users on the server, not just those in the restricted group. The AppLocker event log only shows 'allowed' entries, with no indication that any processes are being blocked. Explorer.exe seems to be running fine, but I'm puzzled by this taskbar problem. Has anyone run into similar issues after implementing AppLocker in a TSplus environment? Is there a known conflict with AppLocker and the TSplus UserDesktop components?
2 Answers
You should also add an allowance for executables signed by Microsoft. We've faced this problem before where essential features get blocked because some start menu components install in user profiles. You can narrow it down later once you confirm that this fix works!
I think you're missing some default allowances. Make sure your rules include Program Files (x86) and Program Data as well. That might solve the taskbar issue for all users.
That was exactly the issue! I added the allowance and it fixed everything. Thanks for the help!