Hi Sam, normally no additional special permissions are needed to be able to use DIS. The error indicates that a helper process of DIS could not be started:  SLDisClassLibraryService.exe. This file can be found in directory  'C:\Users\<username>\AppData\Local\Microsoft\VisualStudio\16.0_cfa737d8\Extensions\<unique_id>\SLDisClassLibraryService'. Unfortunately the unique ID changes every time you install or update the extension. This might make it harder to add an exclusion rule to the group policy.