Am 04.03.2015 um 17:31 schrieb Klaus Hartnegg:
Software Restriction Policy (SRP) in Win7-64 behaves different than in
Win7-32 or WinXP-32 (I'm using SRP in whitelisting mode, default level
is restricted).
SRP allows to choose whether it should affect everybody, or everybody
except admins. In 32bit this does have the expected effect. But in 64bit
administrator always are allowed to run executables everywhere,
regardless of SRP settings. Is SRP broken in 64bit Windows?
This strange effect goes away when I uninstall Sophos Antivirus.
And it stays away after reinstalling Sophos.
Maybe it's important that SRP is already configured when Sophos gets
installed (although it must be disabled for the installation).
