How-To Geek Forums / Windows Vista
(Solved) - Windows Defender turned off by group Policy?
(11 posts)When I try to access Windows Defender through the Start menu or via the Control Panel, I get a message:-
'Windows is Turned off by Group Policy. Windows Defender won't provide protection against harmful or potentially unwanted software and it won't send you alerts because it is off. To protect your computer against harmful or potentially unwanted software, contact your system administrator to enable Windows Defender via group policy'
Now I'm the administrator, I don't remember disabling or switching off WD and wish to know how to enable it.. Can anyone help?
Welcome Rick, can you access it directly? Here is the path.
C:Program FilesWindows DefenderMSASCui.exe
C:Program FilesWindows DefenderMSASCui.exe
The Group Policy is it referring to is probably the value DisableAntiSpyware under HKLMSoftwarePoliciesMicrosoftWindows Defender in the registry.
Just delete that value and Windows Defender should work again.
Just delete that value and Windows Defender should work again.
Lighthouse -
Right-click and 'run as administrator' on C:Program FilesWindows DefenderMSASCui.exe returned same message as in my first post.
Right-click and 'run as administrator' on C:Program FilesWindows DefenderMSASCui.exe returned same message as in my first post.
jd2066 -
Having trouble finding 'HKLMSoftwarePoliciesMicrosoftWindows Defender' nearest I can find is:-
HKEY_CURRENT_USERSoftwarePoliciesMicrosoft but there is no 'Windows Defender' part to it. I got this from regedit is that the place to look?
Having trouble finding 'HKLMSoftwarePoliciesMicrosoftWindows Defender' nearest I can find is:-
HKEY_CURRENT_USERSoftwarePoliciesMicrosoft but there is no 'Windows Defender' part to it. I got this from regedit is that the place to look?
Thanks jd2066 - value deleted as you suggested and I have WD back. Thanks Lighthouse for your input too.
Just wanted to post THANKS! This exact issue has been annoying & irritating me on my own computer for weeks on end and I haven't been able to find a solution until I came across this. Now, resolved. THANKS.
Will
Hi willray. Thankyou for being so kind as to let us know :)
hi guys, sorry about bumping this, would just like to say my main pc was attacted by the worm.win32 netsky virus and was worried about it.
Mass effect 2 best shotgun. after firing up my old pc and google'ing for help i got rid of it thanks to the help here. so thanks guys keep up the good work.
Topic Closed
This topic has been closed to new replies.
On Windows 10, the Registry is a critical database that stores low-level settings that are essential for the OS and many applications. Although you can use it to change numerous settings on your computer (such as stopping Windows auto updates and blocking users from changing the desktop wallpaper), it's never wise to edit this database unless you know exactly what you're doing, because a tiny mistake can result in many problems.
While most tech-savvy users are aware of the risks of using the Registry, it might not be so obvious for non-technical users. For example, you could be sharing your device with other users. If they're looking to change certain settings, the instructions they'll find could involve editing the Registry, which may result in errors and other issues on your PC.
If you don't want others to change settings on your Windows 10 device, it's possible to prevent users from opening and editing the Registry in at least two different ways.
In this Windows 10 guide, we'll walk you through the steps to block users from opening and editing the Registry using Group Policy and (ironically) the Registry itself.
How to prevent users from accessing the Registry using Group Policy
The easiest way to block users from opening and editing the Registry on Windows 10 is by using the Local Group Policy editor. However, you can only use this option if you're running Windows 10 Pro, Enterprise, or Education.
To prevent users from launching and editing the Registry using Group Policy, do the following:
- Use the Windows key + R keyboard shortcut to open the Run command.
- Type gpedit.msc and click OK to open the Local Group Policy editor.
- Browse the following path:
User Configuration > Administrative Templates > System
- On the right side, double-click the Prevent access to registry editing tools policy.
- Select the Enabled option.
- Under 'Options,' select Yes from the drop-down menu if you don't want users to use the Registry while still being able to edit settings silently using the regedit /s switch. Or select No to prevent running the editor at all.
- Click Apply.
- Click OK.
Using the Local Group Policy editor, you only need to enable the option on one account to apply the changes to all users. Once you complete the steps, anyone who signs in to the computer won't be able to use the Registry editor.
When you no longer need this option, you can follow the same steps, but on step No. 5, select the Not Configured option. These changed settings via the Local Group Policy editor should take effect immediately, and you shouldn't need to restart your computer.
How to prevent users from accessing the Registry using Registry
If you're running Windows 10 Home, you won't have access to the Local Group Policy editor, but you can still prevent users from using the editor by modifying the Registry.
Important: While it might be redundant, it should be noted that editing the Registry is risky, and it can cause irreversible damage to your installation if you don't do it correctly. We recommend making a full backup of your computer before proceeding.
Unlike using Group Policy, which blocks the Registry for all users on all accounts at once, if you're using the Registry, you'll need to perform this task on every account in which you don't want users to use the editor.
Disable Registry
To prevent users from accessing the editor using the Registry, do the following:
- Open Start.
- Search for regedit, right-click the result, and select Run as administrator. If you're dealing with a standard account, you must enter the credential for your administrator account to continue. Otherwise, you won't be able to make the changes unless you change the account type temporarily to Administrator.
- Browse the following path:
HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionPolicies
- Right-click the Policies (folder) key, select New and click on Key.
- Name the key System and press Enter.
- Right-click on the right side of 'System,' select New and click on DWORD (32-bit) Value.
- Name the key DisableRegistryTools and press Enter.
- Double-click the newly created DWORD and change its value from 0 to 1.DisableRegistryTools value options:
- 0 - Registry editor works normally.
- 1 - Registry editor won't open, but it can be started in silent mode using the /s switch while using commands.
- 2 - Registry editor cannot be started normally or silently.
- Click OK.
If you don't have access to Group Policy, it's not recommended to use the value of 2, because it'll be extremely difficult to revert the changes.
After completing the steps, you won't be able to open and modify the Registry in the account to which you applied the restriction.
Repeat the steps described above on every account in which you don't want users to mess with the Registry. Peoplesoft you are not authorized to access this component service.
While this option is intended for those who can't access Group Policy, you can also use this option if you want to block the editor for other users while allowing yourself continued access to the Registry.
Enable Registry
If you need to revert the changes, you'll need to use alternative steps because, for obvious reasons, you won't be able to open the Registry.
- Open Notepad.
- Copy and paste the following code into the text file:
Windows Registry Editor Version 5.00[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem]'DisableRegistryTools'=dword:00000000
- Click the File menu and select Save as.
- Save the file in a location that's easy to find with a descriptive name and using the .reg extension (for example, enableRegsitry.reg).
- Open Start.
- Search for Command Prompt, right-click the result and select Run as administrator.
- Type the following command to navigate to the path of the .reg file you created and press Enter:
cd C:UsersAdmin
- In the command, change C:UsersAdmin for your path to the .reg file.
- Type the following command to enable the Registry and press Enter:
regedit.exe /s enableRegistry.reg
- Close Command Prompt.
These steps will change the DisableRegistryTools DWORD from 1 back to 0. If you didn't get any errors, you should now be able to regain access to the Registry immediately.
Wrapping things up
While you can use these instructions to prevent users from accessing the Registry if you're the tech support person for family and friends, you should also consider applying these changes to their computers to minimize the help they'll need if they mess with the Registry.
Harry potter and the sorcerer's stone full movie in hindi on youtube. Harry learns that his parents were wizards and were killed by an evil wizard Voldemort, a truth that was hidden from him all these years. He embarks for his new life as a student, gathering two good friends Ron Weasley and Hermione Granger along the way. For some reason the family has always mistreated him. On his 11th birthday a giant man named Rubeus Hagrid hands him a letter telling him that he has been accepted as a student at the Hogwarts School of Witchcraft and Wizardry. Harry Potter is an average bespectacled 11 year old boy who has lived with the Dursley family ever since his parents died in a car crash.
Finally, this guide is focused on Windows 10, but you can use the same steps on Windows 8.1 and Windows 7.
More Windows 10 resources
For more help articles, coverage, and answers to common questions about Windows 10, visit the following resources:
Getting This Program Is Blocked by Group Policy error while trying to open an application or while perform a Task on Windows 7/8/10 computer ? This error message states that the particular application can’t be opened because this Program is Blocked by Group Policy. The problem can be related to opening Antivirus software, Software on USB Device, or while trying to access Windows executable files. Depending on users system configuration they can face the following error:
The program is blocked by group policy. For more information contact your system administrator. (Error Code: 0x00704ec)
This problem mostly Cause Virus malware or ransomware infection. User who enables the Software Restriction Policy and then forgets about it or when another application. Or some bug some how allows the Software Restriction Policy etc.
Post Contents :-
- 1 Fix This Program Is Blocked by Group Policy
Fix This Program Is Blocked by Group Policy
After understand the problem and reason behind the issue lets perform bellow steps to get rid of This Program Is Blocked by Group Policy error on windows 10/8.1 and 7 computers. Create A system restore pointis best exercise before Apply bellow solutions.
Run CCleaner and Malwarebytes
To Deal issues like This First make sure your system is fully optimized, Not infected with virus or malware infection and have installed the latest windows updates. First check and install latest windows updates from settings -> update & security -> windows update and check for update this will check and install latest windows updates which help to fix system bugs. Download and install CCleaner & good antivirus like Malwarebytes and perform full system scan to check and remove harmful files. Again with help of Ccleaner tool clear system junk, Cache, Cookies, system error files etc and Fix missing, Broken registry errors.
Also Check And Fix Corrupted system files using System file checker utility then After Restart your PC to get a fresh start. This would Fix This Program Is Blocked by Group Policy error but if it didn’t then continue to the next method.
Perform a Clean Boot
Again if any 3rd party software conflict with other application, this can cause the application block error. In order to FixThis Program Is Blocked by Group Policy error, you need to perform a clean boot on your PC which help to find and diagnose the issue.
Disable the Software Restriction Policy
Open Command Prompt As Administrator and type bellow command to Disable the Software Restriction policy.
REG ADD HKLMSOFTWAREPoliciesMicrosoftWindowsSaferCodeIdentifiers /v DefaultLevel /t REG_DWORD /d 0x00040000 /f
Or Simply open Notepad, And type REG ADD HKLMSOFTWAREPoliciesMicrosoftWindowsSaferCodeIdentifiers /v DefaultLevel /t REG_DWORD /d 0x00040000 /f As shown bellow image. Then press Ctrl + s to save the file, Select the desire location to save the file. Then change the Save as the type and then click on All Files and name the file as your wish but end it with a .BAT extension. For example, Disable the Software Restriction Policy.bat and click on Save.
Now Navigate to the location where you saved the .BAT file and double click on it to launch it. If asked to confirm the action in a popup, confirm it.
The .BAT file will launch a Command Prompt and execute the command programmed into it. This only takes a couple of seconds on even the slowest of computers. Once the .BAT file is done running the command and the Command Prompt has been closed. Now restart your computer to give a fresh start and check This Program Is Blocked by Group Policy is resolved.
Tweak and Delete Some Registry Keys
Note : registry Are essential part of windows, any wrong modification cause serious issue. So we recommend backup current registry before make any changes.
Press the Windows key + R, Type regedit and hit enter key. Now on left pane of Registry Editor navigate to the following directory :
HKEY_LOCAL_MACHINE > Software > Policies
In the left pane, locate and right-click on the Microsoft sub-key under the Policies registry key, click on Delete in the context menu and click on Yes in the resulting popup to confirm the action.
In the left pane of the Registry Editor, navigate to the following directory:
HKEY_CURRENT_USER > Software > Policies
In the left pane, locate and right-click on the Microsoft sub-key under the Policies registry key, click on Delete in the context menu and click on Yes in the resulting popup to confirm the action.
In the left pane of the Registry Editor, navigate to the following directory:
HKEY_CURRENT_USER > Software > Microsoft > Windows > CurrentVersion
In the left pane, locate and right-click on the Group Policy Objects sub-key under the CurrentVersion registry key, click on Delete in the context menu and click on Yes in the resulting popup to confirm the action.
In the left pane of the Registry Editor, navigate to the following directory:
HKEY_CURRENT_USER > Software > Microsoft > Windows > CurrentVersion
In the left pane, locate and right-click on the Policies sub-key under the CurrentVersion registry key, click on Delete in the context menu and click on Yes in the resulting popup to confirm the action. That’s All Now Close the Registry Editor, and Restart the computer.
Disable Symantec Endpoint Protection
Also Some Users Report Disable Symantec Endpoint protection help them to fix application blocked by group policy issue. Symantec Endpoint Protection is an Application and Device Control function where there is a setting to Block All Programs from running from removable media. Now Symantec edits the registry in order to block programs which explains why users see a generic Windows error rather than from Symantec itself.
Launch the Symantec Endpoint Protection Manager -> navigate to Application and Device
Control -> on left-hand menu click on Application Control. Here Make sure to uncheck “Block programs from running from removable drives.“ Save changes and close Symantec Endpoint Protection Manager. Now Reboot your PC and check the issue resolved.
Control -> on left-hand menu click on Application Control. Here Make sure to uncheck “Block programs from running from removable drives.“ Save changes and close Symantec Endpoint Protection Manager. Now Reboot your PC and check the issue resolved.
Create a New User Account
If all Above methods failed to fix the issue, Then Create A new User account, With Fresh Users profile check the issue get resolved or not. To Create a new user account open Settings -> Accounts -> Family & other people tab -> click Add someone else to this PC under Other people.
Now Click I don’t have this person’s sign-in information at the bottom and Select Add a user without a Microsoft account at the bottom.
Type the username and password for the new account, click Next and finish. Then after Sign in with this new user account check there is no more This Program Is Blocked by Group Policy Error while running applications. That means problem with old users Account settings or the user profile get corrupted. Anyway transfer your files to new account and delete the old account in order to complete the transition to this new account.
Remove the Domain Group Policy From Machine
You Are Reading this means still your problem not resolved. If your machine is on a Domain network and you are getting This Program Is Blocked by Group Policy, Then we are going to remove the Domain Group policy form the machine. To Do this open Windows registry Editor by press win + R, Type regedit and hit enter. Then navigate to the fallowing key.
ComputerHKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoft
Here select Microsoft folder, right-click on it and select Delete.
Next Similarly, navigate to the following :
ComputerHKEY_CURRENT_USERSoftwarePoliciesMicrosoft
Right-click on Microsoft folder and select Delete.
After That navigate to bellow keys and delete Group Policy and Policies keys.
ComputerHKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionGroup Policy
ComputerHKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPolicies
That’s All Now close Registry Editor and reboot your PC to take effect the save changes. After That check i hope there is no more Program or Application Block Error.
These are most applicable solutions to fix this Program Is Blocked by Group Policy Error on Windows 10 Computer. Face any difficulty while apply above solutions, Or have any query about the post feel free to discuss on comments bellow. Also Read Fix Your DNS Server Might Be Unavailable In Windows 10.
How to Allow or Block Access to Microsoft Store App in Windows 10
The Microsoft Store app in Windows 10 offers various apps, games, music, movies & TV, and books that users can browse through, purchase, or get for free to download and install for their Microsoft account in Windows 10 PCs and devices.
If you like, you can turn off the Store app to deny users access to the Store.
This tutorial will show you how to allow or block access to the Store app for all users in Windows 10.
You must be signed in as an administrator to be able to allow or block access to the Store app.
Access to the Store is required for users to install app updates, so you may wish to make sure that automatic app updates are turned on before blocking access to the Store app.
UPDATE: This policy will now only work in the Windows 10 Enterprise and Windows 10 Educationeditions for version 1511 and later.
For more details, see:
UPDATE: This policy will now only work in the Windows 10 Enterprise and Windows 10 Educationeditions for version 1511 and later.
For more details, see:
CONTENTS:
- Option One: To Allow or Block Access to Store App in Group Policy
- Option Two: To Allow or Block Access to Store App using a REG file
EXAMPLE: The Store app is blocked
To Allow or Block Access to Store App in Group Policy
The Local Group Policy Editor is only available in the Windows 10 Pro, Enterprise, and Educationeditions. All other editions can use Option TWO below instead.
1. Open the Local Group Policy Editor.
2. In the left pane of Local Group Policy Editor, navigate to the location below. (see screenshot below)
Computer ConfigurationAdministrative TemplatesWindows ComponentsStore
3. In the right pane of Store in Local Group Policy Editor, double click/tap on the Turn off the Store application policy to edit it. (see screenshot above)
Setup Blocked By Group Policy Windows 10
4. Do step 5 (allow) or step 6 (block) below for what you would like to do.A) Select (dot) Not Configured or Disabled, click/tap on OK, and go to step 7 below. (see screenshot below)
Not Configured is the default setting.
A) Select (dot) Enabled, click/tap on OK, and go to step 7 below. (see screenshot below)
7. When finished, you can close the Local Group Policy Editor if you like.
To Allow or Block Access to Store App using a REG file
The downloadable .reg files below will add and change the registry key and DWORD value below.
HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsStore
RemoveWindowsStore DWORD
delete or 0 = allow
1 = block
1. Do step 2 (allow) or step 3 (block) below for what you would like to do.
This is the default setting.
A) Click/tap on the Download button below to download the file below, and go to step 4 below.
Allow_Access_to_Store_app.reg
A) Click/tap on the Download button below to download the file below, and go to step 4 below.
Block_Access_to_Store_app.reg
4. Save the .reg file to your desktop.
5. Double click/tap on the downloaded .reg file to merge it.
6. If prompted, click/tap on Run, Yes (UAC), Yes, and
Installation Blocked By Group Policy
OK to approve the merge.7. If you like, you can now delete the downloaded .reg file.
That's it,
Shawn
Malware may have disabled Security Essentials (as well as other anti-malware products) from running. Check this registry key:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerDisallowRun
If any of the entries have “msseces.exe” as data, delete the entry, and restart your PC.
Try Hitman Pro Trial Version: http://www.surfright.nl/en/hitmanpro This program may be run from a flash drive.
And/or
Try TDSS Killer: http://www.bleepingcomputer.com/virus-removal/remove-tdss-tdl3-alureon-rootkit-using-tdsskiller TDSS Killer may be run from a flash drive.
You may wish to download (on an uninfected PC) one or more of the following rescue scanners to create bootable media to scan the infected PC (list courtesy of forum member, GreginMich):
Each rescue scanner will miss things – because none of them will have a perfectly complete and up-to-date set of definitions; so you might need to use several of these rescue scanners, or something like the Shardana Antivirus Rescue Disk Utility, which creates a custom bootable CD or flash drive that includes multiple rescue scanners:
You can alsostart here - https://support.microsoftsecurityessentials.com/ and select the link that says - I think my computer is infected. Options will vary by region, but phone support leads you to Microsoft Answer Desk (http://www.answerdesk.com/) in the US at this time. After an initial free consultation, a fee will be charged for assistance, based on the details of the case.
This web site - http://www.bleepingcomputer.com- contains details for many of the common infections, often immediately after they began to appear in the wild, and instructions are provided for how to remove the infections using their malware removal guides. They also have forums where you can seek help from people who specialize in malware removal.
This may also be helpful - How to get rid of malware:
-steve