Environment
Novell ZENworks 10 Configuration Management
Situation
Since ZCM applies the GPO to be edited prior to editing it, if the "Run Only Allowed Applications" setting is enabled in a Group Policy, it will prevent the Policy from being edited after it is initially created.
Resolution
This is fixed in version 10.2 - see KB 7003225 "ZENworks Configuration Management SP2 (10.2)" which can be found at https://www.novell.com/support
Workaround:
Prior to 10.2, add GPTool.exe, MMC.exe, and GPMessageRouter.exe to the list of applications that can be run.