Windows 10: SrpUxSnapIn.dll Error when trying to Add New AppLocker rule for user

  1.    02 Mar 2017 #1

    SrpUxSnapIn.dll Error when trying to Add New AppLocker rule for user


    Hi,

    I'm setting up a reference machine and want to disable access to the Windows Store App for a specific user through Applocker in the Local Security Policy application. This is one of the last things I need to complete before I am ready to capture and deploy my image. I've learned that Windows 10 Pro no longer has the ability to block access to the Store App through Group Policy, so I decided to make a rule using App Locker. Unfortunately, whenever I try add a rule, I receive a SrpUxSnapIn.dll error that states:

    MMC has detected an error in snap-in and will unload it.
    Click image for larger version. 

Name:	Screenshot (1).png 
Views:	19 
Size:	7.0 KB 
ID:	123370

    Click image for larger version. 

Name:	Screenshot (2).png 
Views:	19 
Size:	11.2 KB 
ID:	123371

    This error occurs immediately after clicking the select button when attempting to browse for the Store app via the Use an installed packaged app as a reference option.

    I have tried running sfc /scannow, but it didn't find any errors. I also did some reading on Google and saw that some people recommended having legacy versions of the .Net Framework installed, but all those articles are Windows 7 related. I did go ahead and add .Net legacy support through the Add/Remove Windows features app. Doesn't seem to resolve my issue.

    Does anyone know what I can do to resolve this issue?
      My ComputerSystem Spec


  2. Posts : 5,343
    Windows 10 Pro X64 16299.19
       02 Mar 2017 #2

    @ahelton, this forum is for BSOD problems obly, as stated in the forum header and the top of all threads:

    Please do not post anything other than Windows 10 Blue Screen Of Death problems in this section.

    I suggest posting this in the General Support | Windows 10 Forums
      My ComputersSystem Spec

  3.    02 Mar 2017 #3

    Ah. Sorry. My mistake. Is there a way to move it to general support?
      My ComputerSystem Spec


  4. Posts : 5,343
    Windows 10 Pro X64 16299.19
       03 Mar 2017 #4

    I'll see if I can get someone to move it.

    Thanks @Brink
      My ComputersSystem Spec

  5.    18 May 2017 #5

    ahelton said: View Post
    Does anyone know what I can do to resolve this issue?
    Sadly, the only solution is to change to Windows 10 Enterprise edition.

    I wanted to lock down the computer I got for my mother (so my nephew would not wreck it too much). I found many references to Applocker, which I tried. I got the same error message (snap in error, SrpUxSnapIn.dll, {8A1A4AD2-7F9F-492c-9E1D-F725E3CBF2F0}), except it would occur when I would change the user/group to which the rule would apply for.

    I went to Microsoft store, and they (in their own words) would only know "easy" stuff, not policies. I rang Microsoft, and their "technical" support replied that AppLocker was a "third-party program". Then I gave up.

    I decided then to investigate if updates could have ruined AppLocker.

    Investigation process:
    1 on a brand new machine, install Windows 10 v1607. do not update, not even bother activating, no internet connection whatsoever.
    2 run secpol, applocker, new rule, next:
    Click image for larger version. 

Name:	2017-05-18_170315.jpg 
Views:	2 
Size:	160.5 KB 
ID:	135512
    3 now select the applicable group:
    Click image for larger version. 

Name:	2017-05-18_170343.jpg 
Views:	2 
Size:	156.5 KB 
ID:	135513
    great, this is the objective. that looks promising!


    4 now, brand new machine again, install Windows 10 v1703.
    5 follow the same procedure as before.

    you get the same mmc error snap-in error.


    After further research on the net, I stumbled (I did not find) on this:
    https://www.microsoft.com/en-au/wind...siness/compare

    which clearly mentions AppLocker as being a feature for Enterprise edition, not Pro.

    For those lost souls still trying to get AppLocker to work on Windows 10 Pro after v1607, forget it. It no longer works. I do not know if it ever did, since I never tried before, but now, on v1703, it certainly does not, and it seems to be a feature removed from the Pro edition, for good.

    And thus, after seeing George Orwell's cautionary tale from the inside, NSA ties to companies, and how blatantly Micro$oft is grabbing and using our information, I got myself thinking again that I should speed up my transition to Linux. When Windows 7 dies, I am not moving to 10, I will go Linux.
    Last edited by broken cog; 18 May 2017 at 04:31.
      My ComputerSystem Spec


 

Related Threads
Logged in as local administrator (not joined to a domain) Windows 10 Enterprise Application Identity Properties (Local Computer): if I change any attribute, then hit apply or ok, I get this message: 109662 If I log in to a command shell as...
OS: Win10Pro Applocker: configured blocking of apps and executables Applocker rules: set to enforcing Service: AppIDSvc is running I've been trying to get Edge and a couple other utilities blocked on the laptop to keep distractions to a...
there used to be a BSOD with appid.sys in November 1511 version whenever we enforce or even just enable dll rules in applocker. Is it resolved with February Cumulative Update
there used to be a BSOD with appid.sys in November 1511 version whenever we enforce or even just enable dll rules in applocker. Is it resolved with February Cumulative Update
Hello whenever I sign in to my user account I get a blue window with a critical error message......saying Start menu and cortana aren't working ( I have cortana turns off in options anyway ) then it says we will try and fix it next time you sign...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 18:14.
Find Us