Forum Discussion

AhmedG130's avatar
AhmedG130
Copper Contributor
Mar 15, 2021

Ms Teams under restricted domain User

Hi All, I have windows server 2016 and I have applied a User software restriction rule, and I allowed the program files and teams path  then I pushed Team with MSI to all PCs but on the Domain us...
Administrator
meetings
microsoft teams
StevenC365's avatar
StevenC365
MVP
Mar 16, 2021

AhmedG130 Teams installs and runs from a folder in the userprofile, the machine wide installer you deployed just sets up the machines so it installs into the users profile as they log on.

 

To use an ARP or AppLocker policy you'll need to trust the publishers certificate.

AhmedG130's avatar
AhmedG130
Copper Contributor
Mar 17, 2021

StevenC365 

Hi Steven,

correct me if I am wrong 

i did the following 

exported Teams Certificate and in Additional Rule, i created a new Certificate Rule unrestricted and added the Certificate i exported earlier 

then in 

User Configuration >windows settings>software restriction policies

in Trusted Publishers 

i defined the policy settings to Allow all admin. and users to manage user own trusted publishers

and marked the two other options for any revoke 

still the installer on the domain user didn't start 

and when i try to do it manually from that user " failed to extract installer "

  • AhmedG130's avatar
    AhmedG130
    Copper Contributor
    Mar 17, 2021
    Hi Again
    I have found the solution
    is to unrestrict the SquirrelTemp folder
    now teams is working fine and updated correctly
    • prabhupadaparida's avatar
      prabhupadaparida
      Copper Contributor
      Aug 23, 2024

      AhmedG130  can you please tell me that how to  unrestricted the Squirrel Temp folder

Resources