Have our first Ryzen PCs at the school, the first issue is that the Radeon Software allows control panel like abilities and has a built in web browser as well as the ability to launch software and overclock a monitor!
The software just installs it self 😞 (as part of the drivers and I'll assume, driver updates)
These are not abilities I wish board teenagers to have access to.
I need to stop the software from running but SRP and AppLocker (via GPO) both seem ineffective at stopping the software.
Also the Radeon Overlay, no one wants that. 🙂
Solved! Go to Solution.
Reply for anyone else, applocker didn't work because I was using local policy for testing which does not apply to domain users.
But some helpful info for the future googlers
When blocking from a remote PC (without Radeon Software Installed) choose M$ calc, then customise the fields and use the publisher "CN=0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE" put and astrix in the second (to block all) and 0.0.0.0 and above.
What install option did you choose when manually install driver,
There are 3, 1 choice is driver only, 2nd is driver/minimal software install, 3rd is full driver/software install.
Thanks for the help but the software installed itself. I installed a vanilla Windows 10 education (enterprise) without drivers and let it fetch them. The default seems to install all the software.
I'd made a faulty assumption when testing and now have AppLocker working 🙂
Installing the correct minimal install would be a clean solution but as it stands I can login (as a non pupil) and access the software.
Reply for anyone else, applocker didn't work because I was using local policy for testing which does not apply to domain users.
But some helpful info for the future googlers
When blocking from a remote PC (without Radeon Software Installed) choose M$ calc, then customise the fields and use the publisher "CN=0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE" put and astrix in the second (to block all) and 0.0.0.0 and above.