User and Computers Snap-In DSA.MSC

Posted on 2004-04-15
Last Modified: 2012-06-22
Is there a way to get this to work on a users computer without loading the admin pak?  I have a user who I have created a custom MMC with task views so they can unlock and reset passwords for their users.  I placed the DSA.MSC in the \windows\system32 folder, but when they try to launch the MMC they are getting a snap-in error.
Question by:jrwaters
LVL 18

Expert Comment

ID: 10835069
I think you are stuck using the admin pak.......but that is easy enough to do......and you can still restrict your user to the custom mmc that you have built..they won't have access to anything you don't allow.

Author Comment

ID: 10835217
I have a word for that, aaarrrrgggg ....  I know they don't have access, however I don't even want them to have all those snap-in's  It's just something for them to play with, even after I delete all the short cut's, they still will play with the MMC.
Time for a letter to MS.
LVL 18

Assisted Solution

JConchie earned 250 total points
ID: 10835295
Once you get them setup with a functioning mmc, you should be able to delete all snapins except for your custom job.
You know the old ain't evil, it's just MS............  :-)
Good luck
LVL 51

Accepted Solution

Netman66 earned 250 total points
ID: 10835348
You can add just the tool you want from adminpak:;en-us;314978&Product=win2000
How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

LVL 18

Expert Comment

ID: 11098525
I could always be wrong,  :-)      ........... but I think I answered the question, giving the same solution as Netman66's knowledge base article...give the user a custom mmc using only the specific snapin (tool) needed for the task to be assigned to that user.................
LVL 20

Expert Comment

ID: 11103358
Hi JConchie,

Sorry actually complete mis-read you first comment - I blame this head cold :-(

If you or Netman66 don't have any objections I prepose a split between the two of you for the points.

Thanks for the pick up :-)

LVL 18

Expert Comment

ID: 11103370
That's fine...hope this is ok with you netman.....
LVL 51

Expert Comment

ID: 11131200
Fine with me.


Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
Learn about cloud computing and its benefits for small business owners.
Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now