Location: User Configuration\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins
Description:
Allows you to permit and prohibit the use of MMC snap-ins. These snap-ins include Active Directory, Disk Management, IP Security, Shared Folders, and WMI Control.