Allow specific executable to run despite Group Policy restrictions

draft · accounts-and-access gporemote-accessexecutable

Generated by docuprocessor (prompt article/v3) · 2026-04-22 06:51

Source thread

thread_id: spaces/AAAA05BdS6s/threads/b729WXxyEPs · 2 msgs · first 2024-05-17 · participants: Tech A

Tech A 2024-05-17 14:14

Hi team, for Hello smile, Dr Attaie would like users to be able to run screen connect so open dental can remote in and fix stuff for them, I see that they currently have several gpos to "whitelist" an application, but they don't even work, because for example that white list splashtop in there doesn't work, since splashtop won't run at all, how can I make an specific .exe not to be blocked, and if possible, to run as admin? he only wants this application, nothing else.

image/png image.png

**Group Policy Management Console** is open on a remote session (via LogMeIn) showing the **"Whitelist Splashtop"** GPO within the **hellosmile.com** domain. The Settings tab displays **Computer Configuration (Enabled)** with Windows Settings > Security Settings visible, and **User Configuration (Enabled)** showing **"No settings defined."** Data was collected on **5/17/2024 at 9:52:18 AM**; the GPO reports **10 settings** as noted in the status bar.

Tech A 2024-05-17 14:14

this is the message that comes up for splashtop, or for most things

image/png image.png

A Windows dialog box displays the message: **"This app has been blocked by your system administrator. Contact your system administrator for more info."** The blocked application is **SplashtopSOS**, visible in the Desktop directory of Windows File Explorer, listed as an **Application** type, **16,896 KB**, dated **5/17/2024 9:53 AM**. Two dialog options are present: **"Copy to clipboard"** and **"Close."**

---
title: "Allow specific executable to run despite Group Policy restrictions"
category: accounts-and-access
tags: ["gpo", "remote-access", "executable"]
source_thread_id: "spaces/AAAA05BdS6s/threads/b729WXxyEPs"
source_space: "spaces/AAAA05BdS6s"
generated_at: "2026-04-22T06:51:27"
participants: ["Tech A"]
---

# Allow specific executable to run despite Group Policy restrictions

## Problem
A client office needs to run Screen Connect for remote support by their practice management vendor, but existing Group Policy Objects are blocking executable files from running. The current "Whitelist Splashtop" GPO is not functioning properly - SplashtopSOS displays the error message "This app has been blocked by your system administrator. Contact your system administrator for more info." The office has multiple GPOs intended to whitelist applications, but they are ineffective at allowing the required executables to run.

## Resolution
The existing GPO whitelisting approach needs to be reviewed and corrected. The current "Whitelist Splashtop" GPO shows Computer Configuration enabled with Windows Settings > Security Settings, but the implementation is not properly allowing the executable to run. To resolve this issue, the Group Policy configuration needs to be modified to properly whitelist the specific executable and optionally allow it to run with administrative privileges.

No complete resolution was provided in the source discussion.

## References
- Source discussion: `spaces/AAAA05BdS6s/threads/b729WXxyEPs`
- Attachments:
  - ![image.png](../attachments/b729WXxyEPs.b729WXxyEPs/image.png) — **Group Policy Management Console** is open on a remote session (via LogMeIn) showing the **"Whitelist Splashtop"** GPO within the **hellosmile.com** domain. The Settings tab displays **Computer Configuration (Enabled)** with Windows Settings > Security Settings visible, and **User Configuration (Enabled)** showing **"No settings defined."** Data was collected on **5/17/2024 at 9:52:18 AM**; the GPO reports **10 settings** as noted in the status bar.
  - ![image.png](../attachments/b729WXxyEPs.wdMrgxsgdSY/image.png) — A Windows dialog box displays the message: **"This app has been blocked by your system administrator. Contact your system administrator for more info."** The blocked application is **SplashtopSOS**, visible in the Desktop directory of Windows File Explorer, listed as an **Application** type, **16,896 KB**, dated **5/17/2024 9:53 AM**. Two dialog options are present: **"Copy to clipboard"** and **"Close."**

Generated article

draft