[gptalk] Re: permitting a custom mmc snap-in via gpo

  • From: rpo <rpo8373@xxxxxxxxx>
  • To: gptalk@xxxxxxxxxxxxx
  • Date: Tue, 14 Oct 2008 16:13:11 +1000

hi florian,

i appreciate your response, this is great info and will work a treat!

just one further question. any easy way to determine the guid of an mmc snap-in?

daniel.


On 13/10/2008, Florian Frommherz <florian@xxxxxxxxxxxxxxx> wrote:
> Howdie!
>
> > at my organisation we have in place snap-in restriction via a policy
> > with this setting: user config\windows components\microsoft management
> > console\restrict users to the explicitly permitted list of snap-ins =
> > enabled.
> >
> > and then in the permitted snap-ins list various snap-ins are enabled.
> > my problem is this list seems to be the default windows snap-ins. what
> > i would like to do is enable the sms admin console snap-in. is there
> > someway i can add it to the permissable list?
>
> You need to write a custom ADM(X) template for this. What the predefined
> templates do is go to [HKCU]\Software\Policies\Microsoft\MMC\{MMC snapin
> GUID} and set the "Restrict_Run" key to either 0 (enabled) or 1 (disabled).
>
> All you need to know is the GUID of the SMS console and edit the predefined
> MMCSnapin.ADMX, better yet create a custom ADMX and insert a new section
> just like you see it built-in for the other mmc snap-ins.
>
> Cheers,
>
> Florian
>
> ***********************
> You can unsubscribe from gptalk by sending email to 
> gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
> logging into the freelists.org Web interface. Archives for the list are 
> available at //www.freelists.org/archives/gptalk/
> ************************
>
***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at //www.freelists.org/archives/gptalk/
************************

Other related posts: