Mark Minasi's Tech Forum
Register Calendar Latest Topics
 
 
 


Reply
  Author   Comment  
Wes

Senior Member
Registered:
Posts: 232
Reply with quote  #1 
Most of us who run applocker are aware of the issue where the start menu is broken under win10/server2016 if the default packaged app applocker rule is not configured.  Because of this we've had this rule deployed for years now.

However it appears some patch in the last 2-3 months has broken a bit of this functionality again despite that rule being there.

On all our applockered win2016 servers, admin accounts can no longer use the start button.  Behavior is pretty much the same as the previous issue, with this logged in event viewer:

ActivateApplicationForContractByAppIdAsUserWithHost of the app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI for the Windows.Launch contract failed with Access is denied..

ActivateApplicationForContractByAppIdAsUserWithHost of the app Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App for the Windows.Launch contract failed with Access is denied..

Anyone else seen this?
0
donoli

Senior Member
Registered:
Posts: 598
Reply with quote  #2 
https://social.technet.microsoft.com/Forums/en-US/39b77adc-42cc-46c5-934b-95e507715aeb/cannot-open-start-menu-on-server-2016?forum=winserverManagement
0
Wes

Senior Member
Registered:
Posts: 232
Reply with quote  #3 
Unrelated.  The source of my issue is applocker.
0
Rambler

Still Checking the Forum Out
Registered:
Posts: 1
Reply with quote  #4 
We're in the same/similar boat. We have 2016 RDSH servers, apps controlled by AppLocker, rule to allow MS packaged apps in place (not the super generic * rule, but we allow all signed MS packaged apps). We're redeploying these RDSH servers very often (due to various other problems) and what is usually happening is that the Start menu works for everyone for couple hours (sometime days) after clean deploy and then it stops working for everyone (not just admins). We have a ticket opened with MS support regarding this for couple months, unsurprisingly, it hasn't been resolved yet.
0
Wes

Senior Member
Registered:
Posts: 232
Reply with quote  #5 
Care to share your ticket number?  I can ping the beta folks I work with and see if they can check it out...
0
Previous Topic | Next Topic
Print
Reply

Quick Navigation:

Easily create a Forum Website with Website Toolbox.