Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: MMC Snap-ins - Only Allow Explicitly Enabled MMC Snap-ins to Open


MMC Snap-ins - Only Allow Explicitly Enabled MMC Snap-ins to Open

How to Only Allow Explicitly Enabled MMC Snap-ins to Open in Windows
Published by Brink
30 Sep 2010
Published by

How to Only Allow Explicitly Enabled MMC Snap-ins to Open in Windows

information   Information
This will show you how to selectively permit or prohibit the use of Microsoft Management Console (MMC) snap-ins for all users on the computer in Vista, Windows 7, and Windows 8.

You will need to be logged in as an administrator to be able to do this tutorial.

Note   Note
When enabled, all snap-ins are prohibited, except those that you explicitly enabled (permit).

When disabled or not configured, all snap-ins are permitted, except those that you explicitly disabled (prohibit).

EXAMPLE: MMC Snap-ins
NOTE: This is the MMC snap-ins in the Local Group Policy Editor that you can set each specific snap-in as enabled, disabled, or not configured. For more details on how to do this with a specific snap-in, click on the Related Tutorials link (more to come later) at the bottom of this tutorial for it.
-mmc_snap-ins.jpg



OPTION ONE
Allow Explicitly Enabled MMC Snap-ins using a REG File
1. To Allow All Enabled or Not Configured MMC Snap-ins to Open
NOTE: This is the default setting of Not Configured. Disabled snap-ins will still not open.
A) Click on the Download button below to download the file below.
Allow_All_Enabled_or_Not_Configured_MMC_Snap-ins.reg
download
B) Go to step 4.
2. To Only Allow Explicitly Enabled MMC Snap-ins to Open
A) Click on the Download button below to download the file below.
Allow_Only_Explicitly_Enabled_MMC_Snap-ins.reg
download
3. Save the .reg file to your desktop.

4. Right click on the downloaded .reg file and click on Merge.

5. Click on Run, Yes, Yes, and OK when prompted.

6. When done, you can delete the downloaded .reg file if you like.






OPTION TWO
Allow Explicitly Enabled MMC Snap-ins in Group Policy
1. Open the all users, specific users or groups, or all users except administrators Local Group Policy Editor for how you want this policy applied.

2. In the left pane, click on to expand User Configuration, Administrative Templates, Windows Components, and Microsoft Mangement Console. (see screenshot below)
-gpedit-1.jpg
3. In the right pane, right click on Restrict users to the explicitly permitted list of snap-ins and click on Edit. (See screenshot above)

4. To Allow All Enabled or Not Configured MMC Snap-ins to Open
A) Select (dot) either Not Configured or Disabled. (see screenshot below step 6)
NOTE: The default setting is Not Configured.

B) Go to step 6.
5. To Only Allow Explicitly Enabled MMC Snap-ins to Open
A) Select (dot) either Enabled. (see screenshot below step 6)
6. Click on OK. (see screenshot below)
-gpedit-2.jpg
7. Close the Local Group Policy Editor window.
That's it,
Shawn




30 Sep 2010   #1
Lomai

Win7 HP (x64)/Win7 Ultimate (x64)
 
 

Thank you Shawn.
This will come in handy
Does this apply to all version of Seven or are some restricted to Pro/Ultimate versions only?

Regards


My System SpecsSystem Spec
30 Sep 2010   #2
Brink

64-bit Windows 10 Pro
 
 

Thank you Lomai.

Option One with the registry can be used in all editions of Windows 7 and Vista.

Option Two can only be used in the Windows 7 Pro, Ultimate, Enterprise, and Vista Business, Ultimate, and Enterprise editions since they only include the Group Policy feature.
My System SpecsSystem Spec
01 Oct 2010   #3
Lomai

Win7 HP (x64)/Win7 Ultimate (x64)
 
 

Ok thanks for the information.

Thanks again
My System SpecsSystem Spec
.

02 Oct 2010   #4
Brink

64-bit Windows 10 Pro
 
 

Anytime mate.
My System SpecsSystem Spec
Comment

 MMC Snap-ins - Only Allow Explicitly Enabled MMC Snap-ins to Open




Tutorial Tools




Similar help and support threads
Windows 7 Tutorial Category
MMC could not create the snap-in. while trying to open the Event Viewe
I saw in other posts the first step should be: SFC /SCANNOW I did that and attached is the CBS.log file. It said at the end that Windows Resource Protection found corrupt files but was unable to fix some of them. I tried rebooting with no luck.
General Discussion
Can't add snap in because of OS
Usually when I boot up my computer it goes straight to the desktop but today there was my account and the administrator account at the log in screen. I wanted to disable the admin account so it would use mine and ignore that log in screen. I googled how to disable it and I needed to enable this...
General Discussion
snap.do
Hi Over the past few days I have noticed that my search engine, home page, and new tab page on google chrome has been different, and that my favorites have all gone. I tried changing them back but it didnt work so I thought nothing of it. Until I noticed that i seem to get windows pop up with...
Hardware & Devices
Snap
I had to do a repair install which seems to have worked well except the snap feature doesnt work anymore. How can i repair this? Thankyou. :cry:
Performance & Maintenance
snap
A minor thing I know, but when I drag a window to the bottom of the screen it does not snap to full height like it supposed to do. Running windows 7 pro
General Discussion
snap
i have abit of a problem on my window seven when im trying to do the snap on the right side it is not working ..and after that if i drag it all the way to the right i cant even see the program..it seems like its all the way to side of the screen and i cant even see it anymore..there is may be a...
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 03:49.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App