We have a group policy object that denies installation from user AppData folders. However, we are trying to install Acronis Backup software onto the environment. We are trying to deploy this application to multiple machines (100-200 machines) and it relies on our RMM to deploy it with the correct settings. This application eventually uses AppData to install onto the machines.

Is there a way to allow an application to run in AppData given the GPO settings?

Thank you for any additional information or guidance.

GPO DETAILS

# Enforcement 
Policy Setting 
Apply Software Restriction Policies to the following All software files except libraries (such as DLLs) 
Apply Software Restriction Policies to the following users All users 
When applying Software Restriction Policies Ignore certificate rules 

# Designated File Types 
File Extension File Type 
ADE ADE File 
ADP ADP File 
BAS BAS File 
BAT Windows Batch File 
CHM Compiled HTML Help file 
CMD Windows Command Script 
COM MS-DOS Application 
CPL Control panel item 
CRT Security Certificate 
EXE Application 
HLP Help file 
HTA HTML Application 
INF Setup Information 
INS INS File 
ISP ISP File 
LNK Shortcut 
MDB MDB File 
MDE MDE File 
MSC Microsoft Common Console Document 
MSI Windows Installer Package 
MSP Windows Installer Patch 
MST MST File 
OCX ActiveX control 
PCD PCD File 
PIF Shortcut to MS-DOS Program 
REG Registration Entries 
SCR Screen saver 
SHS SHS File 
URL Internet Shortcut 
VB VB File 
WSC Windows Script Component 

# Trusted Publishers 
Trusted publisher management Allow all administrators and users to manage user's own Trusted Publishers 
Certificate verification None 


Software Restriction Policies/Security Levelshide
Policy Setting 
Default Security Level Unrestricted 

# Software Restriction Policies/Additional Ruleshide
Path Ruleshide
%AppData%*.exe 
Security Level Disallowed 
Description Don't allow executables to run from %AppData% 
Date last modified 10/25/2013 3:32:59 PM 

%HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionSystemRoot% 
Security Level Unrestricted 
Description 
Date last modified 10/25/2013 3:32:18 PM 

%HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionProgramFilesDir% 
Security Level Unrestricted 
Description 
Date last modified 10/25/2013 3:32:18 PM 

%LocalAppData%*.exe 
Security Level Disallowed 
Description Don't allow executables to run from %AppData% 
Date last modified 10/25/2013 3:34:17 PM 

%LocalAppData%**.exe 
Security Level Disallowed 
Description Don't allow executables to run from immediate subfolders of %AppData% 
Date last modified 10/28/2013 10:26:46 AM 

%LOCALAPPDATA%CitrixGoToMeeting**.exe 
Security Level Unrestricted 
Description Citrix GoToMeeting and Webinar exception. 
Date last modified 1/16/2014 11:49:03 AM 

%LocalAppData%Temp*.zip*.exe 
Security Level Disallowed 
Description Block executables run from archive attachments opened using Windows built-in Zip support. 
Date last modified 10/28/2013 10:29:51 AM 

%LocalAppData%Temp7z**.exe 
Security Level Disallowed 
Description Block executables run from archive attachments opened with 7zip. 
Date last modified 10/28/2013 10:28:01 AM 

%localappdata%Tempjre-7u67-windows-i586-iftw.exe 
Security Level Unrestricted 
Description Allow Java Updates 
Date last modified 9/2/2014 2:44:56 PM 

%LocalAppData%TempKAgentSilent.exe 
Security Level Unrestricted 
Description 
Date last modified 3/6/2014 3:03:42 PM 

%localappdata%tempkas6071.exe 
Security Level Unrestricted 
Description Kaseya Agant install file. 
Date last modified 9/17/2014 7:12:34 PM 

%localappdata%tempose00000.exe 
Security Level Unrestricted 
Description Office 2013 install 
Date last modified 7/24/2015 9:11:32 AM 

%LocalAppData%TempRar**.exe 
Security Level Disallowed 
Description Block executables run from archive attachments opened with WinRAR. 
Date last modified 10/28/2013 10:27:28 AM 

%localappdata%Tempvcredist_x86.exe 
Security Level Unrestricted 
Description TValue5 program executable. 
Date last modified 8/25/2014 4:10:27 PM 

%LocalAppData%Tempwz**.exe 
Security Level Disallowed 
Description Block executables run from archive attachments opened with WinZip. 
Date last modified 10/28/2013 10:28:58 AM 

%UserProfile%Local Settings*.exe 
Security Level Disallowed 
Description Don't allow executables to run from %AppData% 
Date last modified 10/25/2013 3:33:27 PM 

%UserProfile%Local Settings**.exe 
Security Level Disallowed 
Description Don't allow executables to run from immediate subfolders of %AppData% 
Date last modified 10/28/2013 10:26:22 AM 

%UserProfile%Local SettingsTemp*.zip*.exe 
Security Level Disallowed 
Description Block executables run from archive attachments opened using Windows built-in Zip support. 
Date last modified 10/28/2013 10:29:24 AM 

%UserProfile%Local SettingsTemp7z**.exe 
Security Level Disallowed 
Description Block executables run from archive attachments opened with 7zip. 
Date last modified 10/28/2013 10:27:45 AM 

%UserProfile%Local SettingsTempose**.exe 
Security Level Unrestricted 
Description Allow Office 2013 executables run from %AppData% 
Date last modified 12/9/2013 2:58:28 PM 

%UserProfile%Local SettingsTempRar**.exe 
Security Level Disallowed 
Description Block executables run from archive attachments opened with WinRAR. 
Date last modified 10/28/2013 10:27:13 AM 

%UserProfile%Local SettingsTempwz**.exe 
Security Level Disallowed 
Description Block executables run from archive attachments opened with WinZip. 
Date last modified 10/28/2013 10:28:22 AM 

If you can get to know specific folder/file names Acronis uses inside AppData, then just make an exclusion with Security Level Unrestricted like you already have for Citrix, JRE etc in your policy.