Fixed with 27766 Workaround for “Your organization used App Control for Business to block this app” dialog in the Canary Channel

Anonymous
2024-12-16T16:39:34+00:00

After updating to Build 27764 in the Canary Channel, some Windows Insiders are reporting hitting the issue that previously impacted the Dev Channel where an “Your organization used App Control for Business to block this app” dialog is shown when attempting to use or install certain third-party apps on your PC due to an incorrect policy being enforced. The following steps should mitigate the issue:

  1. Open Command Prompt with administrator privileges.
  2. Type and hit enter: mountvol s: /s
  3. Type and hit enter: del S:\EFI\Microsoft\Boot\cipolicies\active{8E8A94F0-6EB9-42C7-A189-E018C8CF3D10}.cip
  4. Type and hit enter: del S:\EFI\Microsoft\Boot\cipolicies\active{36D62F7C-AB85-4F61-8724-744294F24023}.cip
  5. Type and hit enter: del S:\EFI\Microsoft\Boot\cipolicies\active{66D7D265-7EDD-47DD-86E4-F7C42CD55A8F}.cip
  6. Then reboot your PC.

If you are dual-booting between the Canary Channel and the Dev Channel or another version of Windows, you will need to do this workaround BEFORE booting to the other OS.

If the above steps do not work, you may need to disable Secure Boot first and follow these steps:

  1. Disable Secure Boot on your PC.
  2. You will be asked to enter your BitLocker recovery key.
  3. Log in to your PC and open Command Prompt with administrator privileges.
  4. Type and hit enter: mountvol s: /s
  5. Type and hit enter: del S:\EFI\Microsoft\Boot\cipolicies\active{8E8A94F0-6EB9-42C7-A189-E018C8CF3D10}.cip
  6. Type and hit enter: del S:\EFI\Microsoft\Boot\cipolicies\active{36D62F7C-AB85-4F61-8724-744294F24023}.cip
  7. Type and hit enter: del S:\EFI\Microsoft\Boot\cipolicies\active{66D7D265-7EDD-47DD-86E4-F7C42CD55A8F}.cip
  8. Reboot your PC once with Secure Boot still disabled.
  9. Then reboot again and enable Secure Boot.

In small cases, your PC may not boot into Windows. To get out of this state, you can follow these steps:

  1. Disable Secure Boot on your PC.
  2. Then get into Windows Recovery, choose advanced boot options and disable driver signature enforcement.
  3. Then do the above-mentioned workaround for deleting the policies after logging in.
  4. Alternatively, you can also delete the above-mentioned policies directly from the Windows Recovery console.
Windows Insider program | Windows Insider preview | Install, activate, and Windows update

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

91 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2025-01-13T18:21:46+00:00

    Yes, public build is dual boot, on both machines. So, the EFI partition is in common for both. I will try to boot the bad system into the Dev build and see if it still has a problem.

    I just checked my other system on which the last update did run normally, and the numbers are different from the ones shown. Had my other machine not refused to do that update, possibly it would not have had that problem.

    I do not have a Canary build.

    Was this answer helpful?

    0 comments
  2. Anonymous
    2025-01-13T17:20:50+00:00

    I am running into this situation on my Public Build (26100.2605). The message popped up when I was reinstalling my Realtek Audio drivers.

    After I went through the process. the installer has finally finished but took about 15 minutes to install the audio components. Much longer than normal.

    I have not yet checked my 2 DEV builds. I reinstalled the drivers because I was initially getting a message the Sonic Studio III was not configured correctly.

    If they are messing with the EFI partition, it may cause others to not have enough room in that partition for updates/upgrades.

    Is your Public Build on a multi-boot machine?

    I had that problem on 2 machines, and both were multiboot.

    The bad CIPolicies in the EFI partition were installed by Canary 27764 which is on the same machine, .and uses the same EFI partition.

    After I deleted those files as explained in Brandon's post, everything was back to normal.

    There is no problem with space on the EFI partition. 🤷‍♂️

    Was this answer helpful?

    0 comments
  3. Anonymous
    2025-01-13T16:45:47+00:00

    I am running into this situation on my Public Build (26100.2605). The message popped up when I was reinstalling my Realtek Audio drivers.

    After I went through the process. the installer has finally finished but took about 15 minutes to install the audio components. Much longer than normal.

    I have not yet checked my 2 DEV builds. I reinstalled the drivers because I was initially getting a message the Sonic Studio III was not configured correctly.

    If they are messing with the EFI partition, it may cause others to not have enough room in that partition for updates/upgrades.

    Was this answer helpful?

    0 comments
  4. Pauli O 16,380 Reputation points Volunteer Moderator
    2025-01-12T05:27:24+00:00

    Follow Brandon's instructions to fix it.

    Was this answer helpful?

    0 comments
  5. Anonymous
    2025-01-12T04:48:10+00:00

    when i tried to install What's Her Face on my Windows 11 laptop, it won't let me install because this message says App Control for Business, and at this point I don't know how to get rid of it.

    Was this answer helpful?

    0 comments