[gptalk] Re: permitting a custom mmc snap-in via gpo
- From: "Florian Frommherz" <florian@xxxxxxxxxxxxxxx>
- To: <gptalk@xxxxxxxxxxxxx>
- Date: Mon, 13 Oct 2008 07:58:10 +0200
Howdie!
> at my organisation we have in place snap-in restriction via a policy
> with this setting: user config\windows components\microsoft management
> console\restrict users to the explicitly permitted list of snap-ins =
> enabled.
>
> and then in the permitted snap-ins list various snap-ins are enabled.
> my problem is this list seems to be the default windows snap-ins. what
> i would like to do is enable the sms admin console snap-in. is there
> someway i can add it to the permissable list?
You need to write a custom ADM(X) template for this. What the predefined
templates do is go to [HKCU]\Software\Policies\Microsoft\MMC\{MMC snapin
GUID} and set the "Restrict_Run" key to either 0 (enabled) or 1 (disabled).
All you need to know is the GUID of the SMS console and edit the predefined
MMCSnapin.ADMX, better yet create a custom ADMX and insert a new section
just like you see it built-in for the other mmc snap-ins.
Cheers,
Florian
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
************************
Other related posts:
