James Santiago's questions

I have a windows 7 image that appears to be using an applocker ruleset that I'm unable to modify or disable.

Performing the following appears to have no effect on this enforced AppLocker mystery ruleset:

• Disabling the AppIdSvc
• restarting the AppIdSvc
• updating the AppLocker ruleset in the local security policy (this system is not part of the domain)
• Any combination of the above

The above comes from this technet article.

This is the result of using the applocker powershell module:

Import-Module AppLocker
Get-AppLockerPolicy -Effective | Test-AppLockerPolicy -Path c:\TestScript.bat

FilePath                             PolicyDecision MatchingRule
--------                             -------------- ------------
C:\TestScript.bat                  AllowedByDefault

If I create a wildcard ruleset for scripts or exes, this test changes to Allowed for the policydecision.

However, when actually testing execution, I receive the error This program is blocked by group policy... and there's a corresponding message in the AppLocker event log stating the execution was prevented from running with a blank RuleName and zeroed RuleId.

There also appears to be rules in effect. If I ran the TestScript.bat as an administrator (UAC is on) then the script will execute as expected an an event will be registered stating the execution was allowed with a RuleName of All scripts. This rule likely came from an earlier setup but I can't seem to find it or remove it. how can I remove these hidden rules?

I have a OS Deployment task sequence that is advertised to clients. During the Apply Operating System step in the sequence a WIM image file is downloaded from winPE then applied. Is it possible to have this image retrieved locally, such as from another connected hard drive or partition that has the image preloaded?

My goal is to move a single SQL 2005 database to a seperate 2008 server. The issue is my level of access to both servers. On each I can only access the database and nothing else. I cant create a backup file or detach the database because I don't have access to the file system or to create a proxy.

I've tried using the generate script function of sql 2005 management studio express to restore the schema but receive command not supported errors when attempting to execute the sql on the new database. Similarly I tried using EMS SQL Manager 2005 Lite to script a backup of the schema and data but ran into similar problems.

How do I go about acomplishing this? I can't seem to find any solutions outside of using the detach and backup functions.