Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Local Users and Groups MMC Snap-in - Enable or Disable



Local Users and Groups MMC Snap-in - Enable or Disable

How to Enable or Disable the Local Users and Groups MMC Snap-in
Published by Brink
25 Oct 2010
Default Local Users and Groups MMC Snap-in - Enable or Disable

How to Enable or Disable the Local Users and Groups MMC Snap-in


information   Information
This will show you how to enable or disable all users on the computer from being able to open and view the Local Users and Groups MMC snap-in window in Vista, Windows 7, and Windows 8.

Note   Note

You will need to be an administrator to open Local Users and Groups.

In Vista, the Local Users and Groups will only be available in the Business, Ultimate, and Enterpise editions.

In Windows 7, the Local Users and Groups will only be available in the Professional, Ultimate, and Enterpise editions.

In Windows RT, 8, and 8.1, the Local Users and Groups will only be available in the Pro and Enterpise editions.

Tip   Tip
If you wanted to disable the Local Users and Groups MMC, then you should also disable the Computer Management MMC to prevent Local Users and Groups from being opened from within Computer Management.

Local Users and Groups MMC Snap-in - Enable or Disable-computer_management2.jpg

EXAMPLE: Local Users and Groups MMC Snap-in Disabled
Name:  Example-1.jpg
Views: 13269
Size:  29.4 KB

Local Users and Groups MMC Snap-in - Enable or Disable-example-2.jpg




OPTION ONE
Enable or Disable Local Users and Groups using a REG File
1. To Enable Local Users and Groups MMC Snap-in
NOTE: This is the default setting of Not Configured.
A) Click on the Download button below to download the file below.
Enable_Local_Users_and_Groups_MMC.reg
download
B) Go to step 4.
2. To Explicitly Enable Local Users and Groups MMC Snap-in
NOTE: This is for if you have enabled the Restrict users to the explicitly permitted list of snap-ins option to only allow the MMC snap-ins with this setting set to open.
A) Click on the Download button below to download the file below.
Explicitly_Enable_Local_Users_and_Groups_MMC.reg
download
B) Go to step 4.
3. To Disable Local Users and Groups MMC Snap-in
A) Click on the Download button below to download the file below.
Disable_Local_Users_and_Groups_MMC.reg
download
4. Click on Save, and save the .reg file to the desktop.

5. Right click on the downloaded .reg file and click on Merge.

6. Click on Run, Yes, Yes, and OK when prompted.

7. If open, close and reopen Local Users and Groups (lusrmgr.msc) to see the change.

8. When done, you can delete the downloaded .reg file if you like.






OPTION TWO
Enable or Disable Local Users and Groups in Group Policy
1. Open the all users, specific users or groups, or all users except administrators Local Group Policy Editor for how you want this policy applied.

2. In the left pane, click on to expand User Configuration, Administrative Templates, Windows Components, Microsoft Mangement Console, and Restricted/Permitted snap-ins. (see screenshot below)
Local Users and Groups MMC Snap-in - Enable or Disable-gpedit-1.jpg
3. In the right pane, right click on Local Users and Groups and click on Edit. (See screenshot above)

4. To Enable Local Users and Groups MMC Snap-in
A) Select (dot) either Not Configured. (see screenshot below step 7)
NOTE: This is the default setting.

B) Go to step 7.
5. To Explicitly Local Users and Groups MMC Snap-in
A) Select (dot) either Enabled. (see screenshot below step 7)
NOTE: This is for if you have enabled the Restrict users to the explicitly permitted list of snap-ins option to only allow the MMC snap-ins with this setting set to open.

B) Go to step 7.
6. To Disable Local Users and Groups MMC Snap-in
A) Select (dot) Disabled. (see screenshot below step 7)
7. Click on OK. (see screenshot below)
Local Users and Groups MMC Snap-in - Enable or Disable-gpedit-2.jpg
8. Close the Local Group Policy Editor window.

9. If open, close and reopen Local Users and Groups (lusrmgr.msc) to see the change.
That's it,
Shawn






Published by
3 Weeks Ago   #1
amartin99

Windows 7 Home Premium 64bit
 
 

seems to only aply to the account it's done int
I need to disable this for all accounts on the server but my own ?


My System SpecsSystem Spec
3 Weeks Ago   #2
Brink
Microsoft MVP

64-bit Windows 8.1 Enterprise
 
 

Hello amartin,

It should have been applied to all users on the local computer. I'm not sure about accounts on a server if they are not all local.
My System SpecsSystem Spec
3 Weeks Ago   #3
amartin99

Windows 7 Home Premium 64bit
 
 

yea that's what I thought to
granted I am trying to use it in winserver 2012 not 2008
I did a search for this on google and it brot up this thread
My System SpecsSystem Spec
.


3 Weeks Ago   #4
Brink
Microsoft MVP

64-bit Windows 8.1 Enterprise
 
 

Odd. Are you doing this in Group Policy?
My System SpecsSystem Spec
3 Weeks Ago   #5
amartin99

Windows 7 Home Premium 64bit
 
 

yes I load gpedit.msc and do it from there
then I have a test account and trie to load lusrmgr.msc in it
it loads
but wont load from my private account
My System SpecsSystem Spec
3 Weeks Ago   #6
Brink
Microsoft MVP

64-bit Windows 8.1 Enterprise
 
 

Hmm, I must admit that I'm not sure why it's not getting applied to all users if you used the all users except administrators option and no other users are in the administrators group.
My System SpecsSystem Spec
2 Weeks Ago   #7
amartin99

Windows 7 Home Premium 64bit
 
 

O I need to aply this to admin class users
My System SpecsSystem Spec
2 Weeks Ago   #8
Brink
Microsoft MVP

64-bit Windows 8.1 Enterprise
 
 

You would only need to do that so that users (ex: your account) in the administrators group wouldn't be affected by the policy.
My System SpecsSystem Spec
2 Weeks Ago   #9
amartin99

Windows 7 Home Premium 64bit
 
 

not sure you understand
I want all the users except me to BE effected by it

I have some mistory admin user that wont behave and I need to stop him
but I don't know who it is
My System SpecsSystem Spec
Comment

 Local Users and Groups MMC Snap-in - Enable or Disable




Tutorial Tools




Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 05:45 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33