How to Only Allow Explicitly Enabled MMC Snap-ins to Open in Windows
Information
This will show you how to selectively permit or prohibit the use of Microsoft Management Console (MMC) snap-ins for all users on the computer in Vista, Windows 7, and Windows 8.
You will need to be logged in as an administrator to be able to do this tutorial.
You will need to be logged in as an administrator to be able to do this tutorial.
Note
When enabled, all snap-ins are prohibited, except those that you explicitly enabled (permit).
When disabled or not configured, all snap-ins are permitted, except those that you explicitly disabled (prohibit).
When disabled or not configured, all snap-ins are permitted, except those that you explicitly disabled (prohibit).
EXAMPLE: MMC Snap-ins
NOTE: This is the MMC snap-ins in the Local Group Policy Editor that you can set each specific snap-in as enabled, disabled, or not configured. For more details on how to do this with a specific snap-in, click on the Related Tutorials link (more to come later) at the bottom of this tutorial for it.
OPTION ONE
Allow Explicitly Enabled MMC Snap-ins using a REG File
NOTE: This is the default setting of Not Configured. Disabled snap-ins will still not open. A) Click on the Download button below to download the file below.
Allow_All_Enabled_or_Not_Configured_MMC_Snap-ins.reg
Download
B) Go to step 4.
2. To Only Allow Explicitly Enabled MMC Snap-ins to Open A) Click on the Download button below to download the file below.
Allow_Only_Explicitly_Enabled_MMC_Snap-ins.reg
Download
3. Save the .reg file to your desktop.
4. Right click on the downloaded .reg file and click on Merge.
5. Click on Run, Yes, Yes, and OK when prompted.
6. When done, you can delete the downloaded .reg file if you like.
OPTION TWO
Allow Explicitly Enabled MMC Snap-ins in Group Policy
2. In the left pane, click on to expand User Configuration, Administrative Templates, Windows Components, and Microsoft Mangement Console. (see screenshot below)
3. In the right pane, right click on Restrict users to the explicitly permitted list of snap-ins and click on Edit. (See screenshot above)
4. To Allow All Enabled or Not Configured MMC Snap-ins to Open A) Select (dot) either Not Configured or Disabled. (see screenshot below step 6)
NOTE: The default setting is Not Configured.
B) Go to step 6.
5. To Only Allow Explicitly Enabled MMC Snap-ins to Open A) Select (dot) either Enabled. (see screenshot below step 6)
6. Click on OK. (see screenshot below)
7. Close the Local Group Policy Editor window.
That's it,
Shawn
Related Tutorials
- How to Enable or Disable the Services MMC Snap-in
- How to Enable or Disable the Computer Management MMC Snap-in
- How to Enable or Disable the Device Manager MMC Snap-in
- How to Enable or Disable the Windows Firewall with Advanced Security MMC Snap-in
- How to Enable or Disable the Local Users and Groups MMC Snap-in
Last edited:
