To restrict access to a permitted list of snap-ins

1. Open MMC.
2. On the File menu, click Add/Remove Snap-in, and then click Add.
3. Under Snap-in, click Group Policy Object Editor, and then click Add.
4. In the Select Group Policy dialog box, do one of the following:
   • To edit the local Group Policy object, click Local Computer.
   • To edit a different Group Policy object, click Browse.
5. Click Finish, click Close, and then click OK.

   The Group Policy Object Editor snap-in provides access to the specified Group Policy object.

6. In the console tree, click Microsoft Management Console.

   Where?

   • PolicyName Policy
   • User Configuration
   • Administrative Templates
   • Windows Components
   • Microsoft Management Console
7. In the details pane, double-click Restrict users to the explicitly permitted list of snap-ins.
8. On the Policy tab, do one of the following:
   • To permit the user to access snap-ins that are not explicitly restricted, click Not Configured or Disabled.
   • To restrict the user from accessing any snap-in that is not explicitly permitted, click Enabled.

Notes

• To open MMC, click Start, click Run, type mmc, and then click OK.
• This feature is not available in XOX.
• This feature applies only in a network where Group Policy object has been configured; a system administrator must enable Group Policy object.
• If you enable this policy, only permitted snap-ins appear in the list of available snap-ins in the Add Standalone Snap-in dialog box in MMC.
• For more information, click the Explain tab in the Restrict users to the explicitly permitted list of snap-ins properties dialog box, and see Help.

Related Topics