If you share Windows 7 with other people, you can
control which snap-ins they’re allowed to use, and you can even prevent
users from adding snap-ins to the MMC.
The latter is the simpler of the two options, so let’s begin with that. The MMC has an author mode
that enables you to add snap-ins to it. If you prevent the MMC from
entering author mode, you prevent users from adding snap-ins. You can
do this using a group policy. Note, too, that this policy also prevents
users from entering author mode for those snap-ins that can be opened
directly (from the Start menu Search box, from the Run dialog box, from
the command line, from Administrative Tools, and so on). Here are the
steps to follow:
1. | Open the Local Group Policy Editor.
|
2. | Navigate to the User Configuration, Administrative Templates, Windows Components, Microsoft Management Console branch.
|
3. | Double-click the Restrict the User from Entering Author Mode policy.
|
4. | Activate the Enabled option.
|
5. | Click OK.
|
Rather
than blocking off the MMC entirely, you might prefer to allow users
access only to specific snap-ins. Here are the steps to follow:
1. | Open the Local Group Policy Editor.
|
2. | Navigate to the User Configuration, Administrative Templates, Windows Components, Microsoft Management Console branch.
|
3. | Double-click the Restrict Users to the Explicitly Permitted List of Snap-Ins policy.
|
4. | Activate the Enabled option.
|
5. | Click OK.
|
6. | Navigate
to the User Configuration, Administrative Templates, Windows
Components, Microsoft Management Console, Restricted/Permitted Snap-Ins
branch.
|
7. | Double-click a snap-in that you want users to access.
|
8. | Activate the Enabled option.
|
9. | Click OK.
|
10. | Repeat steps 7–9 for each snap-in that you want users to access.
|
