Reply to thread

Message

<blockquote data-quote="shmu26" data-source="post: 716581" data-attributes="member: 37647">Installed test40 at default settings on win10 x64 RS3. (The only custom setting I made is to block cmd.)Glad to say that I did not see the issue I reported before, about Word being unable to open docs that were &quot;placeholders&quot; in OneDrive.But I am still having issues that OSA starts up disabled, and I can&#039;t enable it. This happens in the following situation:1 I log into user account 1. Then I &quot;lock&quot;, i.e., I don&#039;t actually sign out, I just go to lock screen2 I log into user account 2. Then I &quot;lock&quot; that user, and return to user account 13 at this point, I am logged into two user accounts simultaneously.4 user account 1 shows OSA as disabled. Protection is not active.Another minor point: If cmd.exe is blocked (advanced settings), and OneDrive has an issue with signing in, it runs a process that gets blocked by OSA. log says:Date/Time: 3/8/2018 9:58:14 AMProcess: [10920]C:\Windows\System32\cmd.exeParent: [3112]C:\Windows\explorer.exeRule: BlockCmdExeExecutionRule Name: Block execution of Windows Command Prompt (cmd.exe)Command Line: &quot;C:\Windows\System32\cmd.exe&quot; /q /c rmdir /s /q &quot;C:\Users\Simcha\AppData\Local\Microsoft\OneDrive\17.005.0107.0008&quot;Signer: Parent Signer: Microsoft WindowsAnd this is the allow rule I made for it:[%PROCESS%: C:\Windows\System32\cmd.exe] [%PROCESSCMDLINE%: &quot;C:\Windows\System32\cmd.exe&quot; /q /c rmdir /s /q &quot;C:\Users\*\AppData\Local\Microsoft\OneDrive\*\amd64&quot;] [%PARENTPROCESS%: C:\Windows\explorer.exe] [%PARENTSIGNER%: Microsoft Windows]Just thought I would mention it, even though it&#039;s my own fault for blocking cmd.</blockquote>

[QUOTE="shmu26, post: 716581, member: 37647"] Installed test40 at default settings on win10 x64 RS3. (The only custom setting I made is to block cmd.) Glad to say that I did not see the issue I reported before, about Word being unable to open docs that were "placeholders" in OneDrive. But I am still having issues that OSA starts up disabled, and I can't enable it. This happens in the following situation: 1 I log into user account 1. Then I "lock", i.e., I don't actually sign out, I just go to lock screen 2 I log into user account 2. Then I "lock" that user, and return to user account 1 3 at this point, I am logged into two user accounts simultaneously. 4 user account 1 shows OSA as disabled. Protection is not active. Another minor point: If cmd.exe is blocked (advanced settings), and OneDrive has an issue with signing in, it runs a process that gets blocked by OSA. log says: Date/Time: 3/8/2018 9:58:14 AM Process: [10920]C:\Windows\System32\cmd.exe Parent: [3112]C:\Windows\explorer.exe Rule: BlockCmdExeExecution Rule Name: Block execution of Windows Command Prompt (cmd.exe) Command Line: "C:\Windows\System32\cmd.exe" /q /c rmdir /s /q "C:\Users\Simcha\AppData\Local\Microsoft\OneDrive\17.005.0107.0008" Signer: Parent Signer: Microsoft Windows And this is the allow rule I made for it: [%PROCESS%: C:\Windows\System32\cmd.exe] [%PROCESSCMDLINE%: "C:\Windows\System32\cmd.exe" /q /c rmdir /s /q "C:\Users\*\AppData\Local\Microsoft\OneDrive\*\amd64"] [%PARENTPROCESS%: C:\Windows\explorer.exe] [%PARENTSIGNER%: Microsoft Windows] Just thought I would mention it, even though it's my own fault for blocking cmd. [/QUOTE]

Verification