How to Enable or Disable the Local Users and Groups MMC Snap-in
Information
This will show you how to enable or disable all users on the computer from being able to open and view the Local Users and Groups MMC snap-in window in Vista, Windows 7, and Windows 8.
Note
You will need to be an administrator to open Local Users and Groups.
In Vista, the Local Users and Groups will only be available in the Business, Ultimate, and Enterpise editions.
In Windows 7, the Local Users and Groups will only be available in the Professional, Ultimate, and Enterpise editions.
In Windows RT, 8, and 8.1, the Local Users and Groups will only be available in the Pro and Enterpise editions.
Tip
If you wanted to disable the Local Users and Groups MMC, then you should also disable the Computer Management MMC to prevent Local Users and Groups from being opened from within Computer Management.
EXAMPLE: Local Users and Groups MMC Snap-in Disabled
OPTION ONE
Enable or Disable Local Users and Groups using a REG File
NOTE: This is the default setting of Not Configured. A) Click on the Download button below to download the file below.
Enable_Local_Users_and_Groups_MMC.reg
Download
B) Go to step 4.
2. To Explicitly Enable Local Users and Groups MMC Snap-in
NOTE: This is for if you have enabled the Restrict users to the explicitly permitted list of snap-ins option to only allow the MMC snap-ins with this setting set to open. A) Click on the Download button below to download the file below.
Explicitly_Enable_Local_Users_and_Groups_MMC.reg
Download
B) Go to step 4.
3. To Disable Local Users and Groups MMC Snap-in A) Click on the Download button below to download the file below.
Disable_Local_Users_and_Groups_MMC.reg
Download
4. Click on Save, and save the .reg file to the desktop.
5. Right click on the downloaded .reg file and click on Merge.
6. Click on Run, Yes, Yes, and OK when prompted.
7. If open, close and reopen Local Users and Groups (lusrmgr.msc) to see the change.
8. When done, you can delete the downloaded .reg file if you like.
OPTION TWO
Enable or Disable Local Users and Groups in Group Policy
2. In the left pane, click on to expand User Configuration, Administrative Templates, Windows Components, Microsoft Mangement Console, and Restricted/Permitted snap-ins. (see screenshot below)
3. In the right pane, right click on Local Users and Groups and click on Edit. (See screenshot above)
4. To Enable Local Users and Groups MMC Snap-in A) Select (dot) either Not Configured. (see screenshot below step 7)
NOTE: This is the default setting.
B) Go to step 7.
5. To Explicitly Local Users and Groups MMC Snap-in A) Select (dot) either Enabled. (see screenshot below step 7)
NOTE: This is for if you have enabled the Restrict users to the explicitly permitted list of snap-ins option to only allow the MMC snap-ins with this setting set to open.
B) Go to step 7.
6. To Disable Local Users and Groups MMC Snap-in A) Select (dot) Disabled. (see screenshot below step 7)
7. Click on OK. (see screenshot below)
8. Close the Local Group Policy Editor window.
9. If open, close and reopen Local Users and Groups (lusrmgr.msc) to see the change.
That's it,
Shawn
Last edited:
