Windows 7 - MMC Snap-ins - Only Allow Explicitly Enabled MMC Snap-ins to Open

   Information

This will show you how to selectively permit or prohibit the use of Microsoft Management Console (MMC) snap-ins for all users on the computer in Windows 7 and Vista.

You will need to be logged in as an administrator to be able to do this tutorial.

   Note

When enabled, all snap-ins are prohibited, except those that you explicitly enabled (permit).

When disabled or not configured, all snap-ins are permitted, except those that you explicitly disabled (prohibit).

1. To Allow All Enabled or Not Configured MMC Snap-ins to Open
NOTE: This is the default setting of Not Configured. Disabled snap-ins will still not open.

A) Click on the Download button below to download the file below.

Allow_All_Enabled_or_Not_Configured_MMC_Snap-ins.reg

B) Go to step 4.

2. To Only Allow Explicitly Enabled MMC Snap-ins to Open

A) Click on the Download button below to download the file below.

Allow_Only_Explicitly_Enabled_MMC_Snap-ins.reg

3. Click on Save, and save the .reg file to the desktop.

4. Right click on the downloaded .reg file and click on Merge.

5. Click on Run, Yes, Yes, and OK when prompted.

6. When done, you can delete the downloaded .reg file if you like.

1. Open the all users, specific users or groups, or all users except administrators Local Group Policy Editor for how you want this policy applied.

2. In the left pane, click on to expand User Configuration, Administrative Templates, Windows Components, and Microsoft Mangement Console. (see screenshot below)

3. In the right pane, right click on Restrict users to the explicitly permitted list of snap-ins and click on Edit. (See screenshot above)

4. To Allow All Enabled or Not Configured MMC Snap-ins to Open

A) Select (dot) either Not Configured or Disabled. (see screenshot below step 6)
NOTE: The default setting is Not Configured.

B) Go to step 6.

5. To Only Allow Explicitly Enabled MMC Snap-ins to Open

A) Select (dot) either Enabled. (see screenshot below step 6)

6. Click on OK. (see screenshot below)

7. Close the Local Group Policy Editor window.