Update succeeded despite of block against setup file?

[Yuki]

I've been testing Windows' built-in Software Restriction Policy just for curiosity.
And when I tried to update SAP manually, SRP blocked %LOCALAPPDATA%\Temp\SecureAPlusNovirusDefSetup_v3.2.1.exe.
However, update itself finally seems to be done.

So I assume it was blocked 'cause I (User=restricted by SRP) initiated update, but update itself was done by auto-update which is running System(not restricted by SRP) privilege.

Is it right?

[sinlam]

Yes, you are right.

When the user click on "Update" button manually, the update will run under user account and not system account.

But if it is automatic update, the update will run under system account.

[Yuki]

Thanks for explanation!