Fixed with 27766 Workaround for “Your organization used App Control for Business to block this app” dialog in the Canary Channel

Anonymous
2024-12-16T16:39:34+00:00

After updating to Build 27764 in the Canary Channel, some Windows Insiders are reporting hitting the issue that previously impacted the Dev Channel where an “Your organization used App Control for Business to block this app” dialog is shown when attempting to use or install certain third-party apps on your PC due to an incorrect policy being enforced. The following steps should mitigate the issue:

  1. Open Command Prompt with administrator privileges.
  2. Type and hit enter: mountvol s: /s
  3. Type and hit enter: del S:\EFI\Microsoft\Boot\cipolicies\active{8E8A94F0-6EB9-42C7-A189-E018C8CF3D10}.cip
  4. Type and hit enter: del S:\EFI\Microsoft\Boot\cipolicies\active{36D62F7C-AB85-4F61-8724-744294F24023}.cip
  5. Type and hit enter: del S:\EFI\Microsoft\Boot\cipolicies\active{66D7D265-7EDD-47DD-86E4-F7C42CD55A8F}.cip
  6. Then reboot your PC.

If you are dual-booting between the Canary Channel and the Dev Channel or another version of Windows, you will need to do this workaround BEFORE booting to the other OS.

If the above steps do not work, you may need to disable Secure Boot first and follow these steps:

  1. Disable Secure Boot on your PC.
  2. You will be asked to enter your BitLocker recovery key.
  3. Log in to your PC and open Command Prompt with administrator privileges.
  4. Type and hit enter: mountvol s: /s
  5. Type and hit enter: del S:\EFI\Microsoft\Boot\cipolicies\active{8E8A94F0-6EB9-42C7-A189-E018C8CF3D10}.cip
  6. Type and hit enter: del S:\EFI\Microsoft\Boot\cipolicies\active{36D62F7C-AB85-4F61-8724-744294F24023}.cip
  7. Type and hit enter: del S:\EFI\Microsoft\Boot\cipolicies\active{66D7D265-7EDD-47DD-86E4-F7C42CD55A8F}.cip
  8. Reboot your PC once with Secure Boot still disabled.
  9. Then reboot again and enable Secure Boot.

In small cases, your PC may not boot into Windows. To get out of this state, you can follow these steps:

  1. Disable Secure Boot on your PC.
  2. Then get into Windows Recovery, choose advanced boot options and disable driver signature enforcement.
  3. Then do the above-mentioned workaround for deleting the policies after logging in.
  4. Alternatively, you can also delete the above-mentioned policies directly from the Windows Recovery console.
Windows Insider program | Windows Insider preview | Install, activate, and Windows update

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

91 answers

Sort by: Oldest
Most helpful Newest Oldest
  1. Anonymous
    2024-12-25T13:43:30+00:00

    Lucky for me MS apps still work and my devices such as keyboard and mouse still work. only outside files and apps don't work. FIX THIS MICROSOFT!

    Was this answer helpful?

    0 comments
  2. Pauli O 16,380 Reputation points Volunteer Moderator
    2024-12-25T13:51:45+00:00

    Do you get error message mentioned in this workaround and if yess, then have you run those workaroud commands?

    Was this answer helpful?

    0 comments
  3. Anonymous
    2024-12-26T03:37:52+00:00

    Do you get error message mentioned in this workaround and if yess, then have you run those workaroud commands?

    Hi Pauli,

    Strange that on the Dell XPS 8940 I only got the message and the drivers' issues on the 24H2 26100.2605, the other 2 systems in multiboot, Beta 22635.4655 and Canary 27764.1000 appeared to be not affected at all on Dell XPS 8940.

    It was a different story on Dell XPS 8930 dual boot where the problems showed up on both 26100.2605 and Canary 27764.1000. 😵‍💫🤷‍♂️

    Image

    Image

    In my case the suggested workaround got rid of the problem on Dell XPS 8940.

    The workaround came a day too late for the Dell XPS 8930 where I already did a clean install of 24H2 to get rid of the problem. 😝🤬

    Was this answer helpful?

    0 comments
  4. Anonymous
    2024-12-26T03:43:46+00:00

    This worked for me

    Thank you .

    1. Open Command Prompt with administrator privileges.
    2. Type and hit enter: mountvol s: /s
    3. Type and hit enter: del S:\EFI\Microsoft\Boot\cipolicies\active{8E8A94F0-6EB9-42C7-A189-E018C8CF3D10}.cip
    4. Type and hit enter: del S:\EFI\Microsoft\Boot\cipolicies\active{36D62F7C-AB85-4F61-8724-744294F24023}.cip
    5. Type and hit enter: del S:\EFI\Microsoft\Boot\cipolicies\active{66D7D265-7EDD-47DD-86E4-F7C42CD55A8F}.cip
    6. Then reboot your PC.

    Note the first command is Type and hit enter: mountvol s:/s

    @Mohammed Mared's,

    You need the space before /s.

    mountvol S: /s

    Image

    Was this answer helpful?

    0 comments
  5. Anonymous
    2024-12-26T03:43:49+00:00

    I followed the steps above and nothing still works besides MS apps after downgrading to build 27758

    Was this answer helpful?

    0 comments