How to Only Allow Explicitly Enabled MMC Snap-ins to Open in Windows
Information
This will show you how to selectively permit or prohibit the use of Microsoft Management Console (MMC) snap-ins for all users on the computer in Vista, Windows 7, and Windows 8.
You will need to be logged in as an administrator to be able to do this tutorial.
Note
When enabled, all snap-ins are prohibited, except those that you explicitly enabled (permit).
When disabled or not configured, all snap-ins are permitted, except those that you explicitly disabled (prohibit).
EXAMPLE: MMC Snap-ins
NOTE: This is the MMC snap-ins in the Local Group Policy Editor that you can set each specific snap-in as enabled, disabled, or not configured. For more details on how to do this with a specific snap-in, click on the Related Tutorials link (more to come later) at the bottom of this tutorial for it.
OPTION ONE
Allow Explicitly Enabled MMC Snap-ins using a REG File
1. To Allow All Enabled or Not Configured MMC Snap-ins to Open
NOTE: This is the default setting of Not Configured. Disabled snap-ins will still not open.
A) Click on the Download button below to download the file below.
Allow_All_Enabled_or_Not_Configured_MMC_Snap-ins.reg
B) Go to step 4.
2. To Only Allow Explicitly Enabled MMC Snap-ins to Open A) Click on the Download button below to download the file below.
Allow_Only_Explicitly_Enabled_MMC_Snap-ins.reg
3. Save the .reg file to your desktop.
4. Right click on the downloaded .reg file and click on Merge.
5. Click on Run, Yes, Yes, and OK when prompted.
6. When done, you can delete the downloaded .reg file if you like.
OPTION TWO
Allow Explicitly Enabled MMC Snap-ins in Group Policy
1. Open the
all users,
specific users or groups, or
all users except administrators Local Group Policy Editor for how you want this policy applied.
2. In the left pane, click on to expand
User Configuration,
Administrative Templates,
Windows Components, and
Microsoft Mangement Console. (see screenshot below)
3. In the right pane, right click on
Restrict users to the explicitly permitted list of snap-ins and click on
Edit. (See screenshot above)
4. To Allow All Enabled or Not Configured MMC Snap-ins to Open A) Select (dot) either Not Configured or Disabled. (see screenshot below step 6)
NOTE: The default setting is Not Configured.
B) Go to step 6.
5. To Only Allow Explicitly Enabled MMC Snap-ins to Open A) Select (dot) either Enabled. (see screenshot below step 6)
6. Click on
OK. (see screenshot below)
7. Close the Local Group Policy Editor window.
That's it,
Shawn