Fix 0xC0000363: Blocked by Software Publisher Policy

You're trying to launch a program, and Windows throws this cryptic error about your administrator restricting it. It's a pain, but the fix is usually quick once you know where to look.

The Direct Fix: Disable the Publisher Rule

This error comes from Software Restriction Policies (SRP) or AppLocker. We're going to remove or adjust the policy that's blocking your program's publisher certificate.

1. Press Windows + R, type gpedit.msc, and hit Enter. If you're on Windows 10/11 Home, skip to the registry section below.
2. Go to Computer Configuration > Windows Settings > Security Settings > Software Restriction Policies. If you see "No Software Restriction Policies," right-click that folder and choose New Software Restriction Policies.
3. Double-click Enforcement in the right pane. Make sure All software files is selected, not just libraries. Click OK.
4. Back in the left pane, click the Additional Rules folder. You'll see a list of certificate and path rules.
5. Look for a rule that references the publisher of the program you're trying to run. It'll show something like "Certificate rule" with a publisher name. Right-click it and choose Properties.
6. In the Security Level dropdown, change it from Disallowed to Unrestricted. Click Apply, then OK.
7. Close the Group Policy Editor. Open a command prompt as Administrator and run gpupdate /force to push the change immediately.

After you run gpupdate, try launching the program again. If it works, you're done.

What If You Can't Find the Rule?

Sometimes the rule is buried in AppLocker instead of SRP. Try this:

1. In gpedit, go to Computer Configuration > Windows Settings > Security Settings > Application Control Policies > AppLocker.
2. Click Executable Rules. Look for any rule that has the publisher's name in the description.
3. Right-click and either disable it or change the action to Allow.

Why This Happens

Software Restriction Policies let administrators block software based on who signed it. If a program's digital certificate gets flagged — maybe because it's old, expired, or from an untrusted source — Windows refuses to run it. The 0xC0000363 error is Windows waving the red flag: "This publisher isn't on my approved list."

The real fix isn't about the program — it's about the rule that's blocking it. Removing or relaxing that rule solves it every time.

Less Common Variations

Home Users Without Group Policy

Windows 10/11 Home doesn't have gpedit.msc. Here's the workaround:

1. Press Windows + R, type regedit, and hit Enter.
2. Go to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers.
3. Look for a key named 0 or 1 under Levels. If you see Disallowed (usually value 0), change it to 0x40000 (Unrestricted).
4. Restart your computer. After the restart, try running the blocked program.

The Error Happens on a Network Share

If the program is on a network drive, the issue might be with the zone transfer. Right-click the .exe, go to Properties, and if you see "This file came from another computer," check the Unblock box. That's not a policy issue, but it looks identical.

Prevention Going Forward

If you're the admin, think twice before using certificate-based rules. They break when certificates expire or get renewed. Path rules or hash rules are easier to manage. For a single program, just add a path rule to allow that specific .exe.

If you're a user on a company machine, talk to your IT department. Tell them "the software publisher rule is blocking program X, could you add an exception?" Most help desks can do this in under two minutes.