We are leveraging the power of Group Policy to limit malware/viruses within our network. We are using the Software Restriction Policies (SRP) feature to build a "black list" of executables that are causing harm for our clients.
Is there a limit to the number of entries in the Software Restriction Policies for each Group Policy object?
The reason that I'm asking is that we currently have about 230 executables that we are blocking using both hash and path rules. Lately, we have been experiencing errors, whenever we modify this particular policy. The error is:
Title: Software Restriction Policy
Body: The rule cannot be saved. The process cannot access the file because it is being used by another process.
We only experience this error when working with this particular policy. I have tested the policy. The policy is not corrupt. However, I suspect that we might be approaching a limit to the number of files allowed per SRP. I can't seem to find much information regarding the maximum file entries for SRPs.
It is my opinion that we should build a second Group Policy with additional SRP entries. Is this a good idea?