[gptalk] Re: permitting a custom mmc snap-in via gpo
- From: rpo <rpo8373@xxxxxxxxx>
- To: gptalk@xxxxxxxxxxxxx
- Date: Wed, 15 Oct 2008 18:19:53 +1000
brilliant. thanks everyone for your help!
On 15/10/2008, Darren Mar-Elia <darren@xxxxxxxxxx> wrote:
> You should see all snap-ins registered on a given machine in the registry
> under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MMC\SnapIns
>
>
> Darren
>
> -----Original Message-----
> From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
> Behalf Of rpo
> Sent: Monday, October 13, 2008 11:13 PM
> To: gptalk@xxxxxxxxxxxxx
> Subject: [gptalk] Re: permitting a custom mmc snap-in via gpo
>
> hi florian,
>
> i appreciate your response, this is great info and will work a treat!
>
> just one further question. any easy way to determine the guid of an mmc
> snap-in?
>
> daniel.
>
>
> On 13/10/2008, Florian Frommherz <florian@xxxxxxxxxxxxxxx> wrote:
> > Howdie!
> >
> > > at my organisation we have in place snap-in restriction via a policy
> > > with this setting: user config\windows components\microsoft management
> > > console\restrict users to the explicitly permitted list of snap-ins =
> > > enabled.
> > >
> > > and then in the permitted snap-ins list various snap-ins are enabled.
> > > my problem is this list seems to be the default windows snap-ins. what
> > > i would like to do is enable the sms admin console snap-in. is there
> > > someway i can add it to the permissable list?
> >
> > You need to write a custom ADM(X) template for this. What the predefined
> > templates do is go to [HKCU]\Software\Policies\Microsoft\MMC\{MMC snapin
> > GUID} and set the "Restrict_Run" key to either 0 (enabled) or 1
> (disabled).
> >
> > All you need to know is the GUID of the SMS console and edit the
> predefined
> > MMCSnapin.ADMX, better yet create a custom ADMX and insert a new section
> > just like you see it built-in for the other mmc snap-ins.
> >
> > Cheers,
> >
> > Florian
> >
> > ***********************
> > You can unsubscribe from gptalk by sending email to
> gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
> logging into the freelists.org Web interface. Archives for the list are
> available at //www.freelists.org/archives/gptalk/
>
> > ************************
> >
> ***********************
> You can unsubscribe from gptalk by sending email to
> gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
> logging into the freelists.org Web interface. Archives for the list are
> available at //www.freelists.org/archives/gptalk/
> ************************
>
> ***********************
> You can unsubscribe from gptalk by sending email to
> gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
> logging into the freelists.org Web interface. Archives for the list are
> available at //www.freelists.org/archives/gptalk/
> ************************
>
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
************************
Other related posts:
