How to Enable or Disable the Computer Management MMC Snap-in


   Information
This will show you how to enable or disable specific all users on the computer from being able to open and view the Computer Management MMC snap-in window in Vista, Windows 7, and Windows 8.

You will need to be logged in as an administrator to be able to do this tutorial.


EXAMPLE: Computer Management MMC Snap-in Disabled
Computer Management MMC Snap-in - Enable or Disable-example-1.jpg

Computer Management MMC Snap-in - Enable or Disable-example-2.jpg




OPTION ONE

Enable or Disable Computer Management using a REG File


1. To Enable Computer Management MMC Snap-in for Current User
NOTE: This is the default setting of Not Configured.
A) Click on the Download button below to download the file below.
Enable_Computer_Management_MMC.reg
B) Go to step 4.
2. To Explicitly Enable Computer Management MMC Snap-in for Only Current User
NOTE: This is for if you have enabled the Restrict users to the explicitly permitted list of snap-ins option to only allow the MMC snap-ins with this setting set to open.
A) Click on the Download button below to download the file below.
Explicitly_Enable_Computer_Management_MMC.reg
B) Go to step 4.
3. To Disable Computer Management MMC Snap-in for Only Current User
A) Click on the Download button below to download the file below.
Disable_Computer_Management_MMC.reg
4. Save the .reg file to your desktop.

5. Right click on the downloaded .reg file and click on Merge.

6. Click on Run, Yes, Yes, and OK when prompted.

7. If open, close and reopen Computer Management (compmgmt.msc) to see the change.

8. When done, you can delete the downloaded .reg file if you like.





OPTION TWO

Enable or Disable Computer Management in Group Policy


1. Open the all users, specific users or groups, or all users except administrators Local Group Policy Editor for how you want this policy applied.

2. In the left pane, click on to expand User Configuration, Administrative Templates, Windows Components, Microsoft Mangement Console, and Restricted/Permitted snap-ins. (see screenshot below)
Computer Management MMC Snap-in - Enable or Disable-gpedit-1.jpg
3. In the right pane, right click on Computer Management and click on Edit. (See screenshot above)

4. To Enable Computer Management MMC Snap-in
A) Select (dot) either Not Configured. (see screenshot below step 7)
NOTE: This is the default setting.

B) Go to step 7.
5. To Explicitly Enable Computer Management MMC Snap-in
A) Select (dot) either Enabled. (see screenshot below step 7)
NOTE: This is for if you have enabled the Restrict users to the explicitly permitted list of snap-ins option to only allow the MMC snap-ins with this setting set to open.

B) Go to step 7.
6. To Disable Computer Management MMC Snap-in
A) Select (dot) Disabled. (see screenshot below step 7)
7. Click on OK. (see screenshot below)
Computer Management MMC Snap-in - Enable or Disable-gpedit-2.jpg
8. Close the Local Group Policy Editor window.

9. If open, close and reopen Computer Management (compmgmt.msc) to see the change.
That's it,
Shawn





Related Tutorials