Fix Vyne Dental Plugin Blocked by AppLocker Group Policy

draft · procedures applockergpo

Generated by docuprocessor (prompt article/v3) · 2026-04-22 09:53

Source thread

thread_id: spaces/AAAA05BdS6s/threads/UwOUugYnXpE · 17 msgs · first 2024-08-12 · participants: Tech ATech B

Tech A 2024-08-12 17:45

@all Any ideas what else can I try here? for Hello Smile, can't get the vyne dental plugin to open due to this message, the plugin installs in the public folder of the pc, can't open it from there either, the user that is logged into this pc is kids dental, which is used on most pcs, and this is working fine in other pcs, running on the same user, I tried some fixes I found online, but no luck > https://technoresult.com/100-worked-fix-this-app-has-been-blocked-by-your-system-administrator/ already gave permissions to the folder where the vyne executable is located. I also created a test domain user to see if I could open it from there, but same message, not sure why the exact same setup works in other pcs and not this one, any ways to bypass this?

image/png image.png

**On-screen message (Windows dialog box):** "This app has been blocked by your system administrator. Contact your system administrator for more info." Two buttons are visible: **"Copy to clipboard"** and **"Close."** No error code is displayed. Background is a solid blue dialog typical of Windows 10/11 AppLocker or Software Restriction Policy enforcement.

Tech B 2024-08-12 17:49

This office has software protection policies implemented via gpo that enforces secure environment and prevents installation of unapproved software

Tech B 2024-08-12 17:50

To install this software needs to be added to the policies, what type of installer is this?

Tech A 2024-08-12 17:52

we installed it from the hitech admin domain user, so its installed already, it just won't open the shortcut to open the actual program, thats the path and the .exe for it

image/png image.png

**Windows File Explorer** is open to the path `C:\Users\Public\res\RESPrinter`, displaying a directory of application files. A **Properties dialog** for `ClaimListener` is open, identifying it as an **Application (.exe)**, described as a **"PMS Dental Plugin"**, located at `C:\Users\Public\res\RESPrinter`, with a size of **5.14 MB (5,393,032 bytes)**. The file was **Created and Modified: Monday, July 22, 2024, 6:15:40 PM**, and last **Accessed: August 12, 2024, 1:51:04 PM**.

Tech A 2024-08-12 17:53

won't open from the regular domain user the office uses, hitech user works fine

Tech B 2024-08-12 17:55

Tech A 2024-08-12 17:58

208427737

Tech A 2024-08-12 18:17

(no text)

image/png image.png

The screenshot shows the output of `gpresult` command for user **CN=Dental Hitech, CN=Users, DC=hellosmile, DC=com**, with Group Policy last applied **8/12/2024 at 1:42:50 PM** from **DC03.hellosmile.com**. The domain is **HELLOSMILE**, type **Windows 2008 or later**, with a slow link threshold of **500 kbps**. Applied Group Policy Objects listed are: **Desktop Shortcuts, screen saver, Default Domain Policy, Wallpaper, INSTALLPC\_RC, and Whitelist ScreenConnect**.

Tech A 2024-08-12 18:50

can't seem to find that dc03 so far, so there is a dc that we don't know about ? 😵‍💫

Tech B 2024-08-12 18:51

Did you check the vm hosts, in domain it’s listed under woodside

Tech A 2024-08-12 18:55

i found it

Tech A 2024-08-12 18:57

196889784 sos to that dc03

Tech A 2024-08-12 18:57

or let me know what to do on it

Tech B 2024-08-12 18:59

it looks like already replicated, try the client

Tech B 2024-08-12 19:00

run gpresutl /r as admin or reapply gpupdate /force /logoff also as admin

Tech A 2024-08-12 19:09

I already did the command above, restarted the pc, but still not applying that, and last time a policy was applied its not updating either, is there any other way to force it or should I give it some time maybe?

image/png image.png

**Windows Command Prompt — `gpresult` USER SETTINGS Output** The screen displays Group Policy results for user **CN=Dental Hitech, CN=Users, DC=hellosmile, DC=com**, with the last Group Policy application recorded on **8/12/2024 at 1:42:50 PM** from **DC03.hellosmile.com**. The domain name is **HELLOSMILE**, domain type is **Windows 2008 or later**, and the slow link threshold is set to **500 kbps**. Applied GPOs listed include: **Desktop Shortcuts, screen saver, Default Domain Policy, Wallpaper, INSTALLPC_RC,** and **Whitelist ScreenConnect**; a partial line indicates some GPOs were filtered out (text is cut off).

Tech B 2024-08-12 19:14

there are switches /force /logoff /boot what you're looking at on your screenshot is user settings, the policy is in computer settings user with limited rights may not see computer settings, you need to run as admin and you can filter scope gpresult /r scope:computer https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/gpupdate https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/gpresult

---
title: "Fix Vyne Dental Plugin Blocked by AppLocker Group Policy"
category: procedures
tags: ["applocker", "gpo"]
source_thread_id: "spaces/AAAA05BdS6s/threads/UwOUugYnXpE"
source_space: "spaces/AAAA05BdS6s"
generated_at: "2026-04-22T09:53:21"
participants: ["Tech A", "Tech B"]
---

# Fix Vyne Dental Plugin Blocked by AppLocker Group Policy

## Problem
The Vyne dental plugin (ClaimListener.exe) installed successfully in `C:\Users\Public\res\RESPrinter` but displays "This app has been blocked by your system administrator" when launched by regular domain users. The plugin works fine when launched by administrative users and functions normally on other workstations with identical user accounts. The office has software protection policies implemented via Group Policy that enforce a secure environment and prevent execution of unapproved software.

## Resolution
1. Identify the domain controller applying the restrictive Group Policy by running `gpresult /r` as administrator on the affected workstation
2. Connect to the identified domain controller (in this case DC03.hellosmile.com)
3. Open Group Policy Management and locate the AppLocker or Software Restriction Policy that is blocking the application
4. Add the executable path `C:\Users\Public\res\RESPrinter\ClaimListener.exe` to the allowed applications list in the appropriate GPO
5. Allow time for Group Policy replication across domain controllers
6. On the client workstation, force Group Policy refresh by running as administrator:
   - `gpupdate /force /logoff` to refresh both user and computer policies with logoff
   - Alternatively use `gpupdate /force /boot` if computer policy changes require restart
7. Verify policy application by running `gpresult /r /scope:computer` as administrator to check computer settings
8. Test the application launch with the regular domain user account

If Group Policy changes do not apply immediately after `gpupdate`, allow additional time for domain controller replication before retesting.

## References
- Source discussion: `spaces/AAAA05BdS6s/threads/UwOUugYnXpE`
- Attachments:
  - ![image.png](../attachments/UwOUugYnXpE.UwOUugYnXpE/image.png) — **On-screen message (Windows dialog box):** "This app has been blocked by your system administrator. Contact your system administrator for more info." Two buttons are visible: **"Copy to clipboard"** and **"Close."** No error code is displayed. Background is a solid blue dialog typical of Windows 10/11 AppLocker or Software Restriction Policy enforcement.
  - ![image.png](../attachments/UwOUugYnXpE.RMxCu6LcGNA/image.png) — **Windows File Explorer** is open to the path `C:\Users\Public\res\RESPrinter`, displaying a directory of application files. A **Properties dialog** for `ClaimListener` is open, identifying it as an **Application (.exe)**, described as a **"PMS Dental Plugin"**, located at `C:\Users\Public\res\RESPrinter`, with a size of **5.14 MB (5,393,032 bytes)**. The file was **Created and Modified: Monday, July 22, 2024, 6:15:40 PM**, and last **Accessed: August 12, 2024, 1:51:04 PM**.
  - ![image.png](../attachments/UwOUugYnXpE.LrfJiJS_cRY/image.png) — The screenshot shows the output of `gpresult` command for user **CN=Dental Hitech, CN=Users, DC=hellosmile, DC=com**, with Group Policy last applied **8/12/2024 at 1:42:50 PM** from **DC03.hellosmile.com**. The domain is **HELLOSMILE**, type **Windows 2008 or later**, with a slow link threshold of **500 kbps**. Applied Group Policy Objects listed are: **Desktop Shortcuts, screen saver, Default Domain Policy, Wallpaper, INSTALLPC\_RC, and Whitelist ScreenConnect**.
  - ![image.png](../attachments/UwOUugYnXpE.iYRFLLXY6Ac/image.png) — **Windows Command Prompt — `gpresult` USER SETTINGS Output**

Generated article

draft