[SOLVED] Can't run exe files from file share

[MotzTech]

I have a client who has a domain controller and some workstations. For some reason they can't run exe files from the file shares. This was never a problem before and none of the permissions have changed. It also only seems to be effecting Windows 7 machines. There is one XP machine that runs exe files just fine from the server share.

Now they CAN run exe files if I boot them in safe mode with networking, so I'm thinking it's something that is running on the workstations. However one of the workstations in question does not have ANYTHING installed besides the following

Standard Windows apps
Custom accounting software
Office 2013
MSE

I have tried to following to resolve this issue, none of the which had any effect
Removed Anti-virus software and rebooted
Logged in under a domain admin account
Confirmed that there are no software restrictions in place via GPO by checking GP on server and running rsop on workstations
Added the file server to the intranet zone in internet settings
Checked and confirmed correct permissions on file share
Rebooted the server (I didn't really think this would help, everyone was out to lunch so I gave it a shot)
Checked event logs and there is nothing regarding this issue.
Ran non exe files (Like txt or log files) and they ran just fine

Here is some additional info that may be pertinent
Server is 2008 R2 Standard with all updates running Domain services, file server, dns, and dhcp, and some custom Hvac and accounting software

Workstations in question are all Windows 7, with all updates. Most of them are running my RMM software and Bitdefender Anti-Virus, except one(mentioned above), which shows the same behavior.

All the systems (expect aforementioned unmanaged system) have regular virus scans and show no signs of infection.

I've tried multiple different types of exes and none of them run. When you try to run them it acts like it can't find them.

Could this maybe be a borked windows update? Or an undetected infection? I've managed to get their software updated with the safe mode workaround, so I have some time to play around with this. Next time they need to update though I would rather they not have to deal with this again.

 

[katz]

To me, this sounds like something that a recent windows update has broken...

 

[Boston Pro Comp Serv LLC]

You might try seeing what runs on startup, since it seems to work in safe mode. Maybe a service or something else that doesn't run in safe mode.... it's probably going to be time consuming, so would rolling back updates. There doesn't seem anyother way to troubleshoot it.

 

[FremontPC]

If no joy with rolling back the latest updates, then msconfig, Services, Hide all MS Services, take note of which ones are already unchecked, Disable All, Apply, restart.

Any difference? Not sure Bitdefender will comply with that gambit, so maybe try the above on the machine that doesn't have BD installed.

You say nothing in the event logs, not on the server or the workstation?

Can you call the exe from an elevated command prompt?

 

[FremontPC]

And then there's this:

http://technet.microsoft.com/en-us/library/ee791868(v=ws.10).aspx

Applies to 2008 R2 and Win7. Nary a word about XP.

 

[FremontPC]

Motz -

How did you fare with this?

 

[MotzTech]

Still working on it, right now actually. They only access exes on the network during an upgrade so it's not a high priority job. Although I'm leaning toward Bitdefender. I uninstalled it on one of the workstations and the issue disappeared. That fails to explain the machine without Bitdefender though, but I'm starting to think that may be misinformation from the end user. Perhaps they just assumed it was the same problem, without really trying it. I will onsite next week so I will know more then.

 

[MotzTech]

Confirmed that it was Bitdefender causing the problem. This is not the first time I have had trouble with them. They have a good detection rate, but if end up spending more time trying to keep the anti-virus from interfering with the end users, it's just not worth it. I ended up switching my entire MSP client base over to Vipre.

 

[FremontPC]

Yikes. What Bitdefender product in particular? Did an uninstall fix it or did you have to use the removal tool?

 

[MotzTech]

It was Cloud Security. A normal uninstall resolved the issue. The product was good, but waaay to locked down for my tastes. The system I have now has all the standard tweaking options. Granted I have to run my own policy server, but it is worth it to get the fine tuning I need.

 

[YeOldeStonecat]

What application was being blocked?
We have a lot of clients on BitDefender (via N-Able)...had one issue with a metal fab shop client, their OMAX water jet cutting software. Added program file path to exclusion and the executable to the process exclusions to fix.