Have our first Ryzen PCs at the school, the first issue is that the Radeon Software allows control panel like abilities and has a built in web browser as well as the ability to launch software and overclock a monitor!
The software just installs it self
These are not abilities I wish board teenagers to have access to.
I need to stop the software from running but SRP and AppLocker (via GPO) both seem ineffective at stopping the software.
Also the Radeon Overlay, no one wants that.
Solved! Go to Solution.
Reply for anyone else, applocker didn't work because I was using local policy for testing which does not apply to domain users.
But some helpful info for the future googlers
When blocking from a remote PC (without Radeon Software Installed) choose M$ calc, then customise the fields and use the publisher "CN=0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE" put and astrix in the second (to block all) and 0.0.0.0 and above.
What install option did you choose when manually install driver,
There are 3, 1 choice is driver only, 2nd is driver/minimal software install, 3rd is full driver/software install.
Thanks for the help but the software installed itself. I installed a vanilla Windows 10 education (enterprise) without drivers and let it fetch them. The default seems to install all the software.
I'd made a faulty assumption when testing and now have AppLocker working
Installing the correct minimal install would be a clean solution but as it stands I can login (as a non pupil) and access the software.
Reply for anyone else, applocker didn't work because I was using local policy for testing which does not apply to domain users.
But some helpful info for the future googlers
When blocking from a remote PC (without Radeon Software Installed) choose M$ calc, then customise the fields and use the publisher "CN=0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE" put and astrix in the second (to block all) and 0.0.0.0 and above.