Reply to thread

Message

<blockquote data-quote="Windows_Security" data-source="post: 543623" data-attributes="member: 50782">[USER=28210]@Av Gurus[/USER]Yes then you make a hole in your SRP, since most software installs from Temp folder.Because the Software Restriction Policies default is set to basic user AND SRP does not apply to Administrator AND you can elevate MSI (installers) with Symantec registry tweak, you should not run into update/install problems,&nbsp; because:<ul>
<li data-xf-list-type="ul">All software in Windows and Program Files folders have to run elevated to get update access to these UAC protected folders. Since SRP does not apply to Admin, all already installed programs are not restricted by SRP (basic user). So the SRP is set and forget</li>
</ul>
<ul>
<li data-xf-list-type="ul">When you want to install new software, just right click and choose &quot;Run as Administrator&quot; and new software will install fine. So the SRP only blocks executions from user space which are not initiated by the user. </li>
</ul></blockquote>

[QUOTE="Windows_Security, post: 543623, member: 50782"] [USER=28210]@Av Gurus[/USER] Yes then you make a hole in your SRP, since most software installs from Temp folder. Because the Software Restriction Policies default is set to basic user AND SRP does not apply to Administrator AND you can elevate MSI (installers) with Symantec registry tweak, you should not run into update/install problems, because: [LIST] [*]All software in Windows and Program Files folders have to run elevated to get update access to these UAC protected folders. Since SRP does not apply to Admin, all already installed programs are not restricted by SRP (basic user). So the SRP is set and forget [/LIST] [LIST] [*]When you want to install new software, just right click and choose "Run as Administrator" and new software will install fine. So the SRP only blocks executions from user space which are not initiated by the user. [/LIST] [/QUOTE]

Verification