Restrict acces to Computer Management

Posted on 2005-04-12
Last Modified: 2013-12-03
Is it possible to restrict users from accesing the Computer Management via right click - My computer - Manage ???

Either via GPO og Regisrty????


Question by:HK-DK
    LVL 57

    Accepted Solution

    Yes - use a software restriction polict in GPO

    restrict access to  Compmgmt.msc

    Software Restriction Policies
    Blocking Programs, Executables and scripts

    Software restriction policies can be applied to just about any program script or file, the big advantage to using this method is, it digitally fingerprints the file so if you have a “clever user” even changing the executable or file name wont let them run it.

    As With all policies you can deploy them locally on each machine (start > run > gpedit.msc) or for everyone at once via the Domain Group Policy (AD users and computers or GPMC (group policy management console)

    Whilst in The Policy Manager (either local or domain)

    Navigate to

    Computer Configuration\Windows Settings\Security Settings\Software Restriction Policies

    By Default there is nothing there

    Click Action  > Create New Policy
    Right Click Additional Rules > Create Hash Rule
    Click the Browse Button
    Navigate to the Executable/Program you want to stop users using.
    Click OK
    Set the Security Level to “Disallowed”
    Click Apply > OK


    Author Comment

    Hmmm it wont work....

    First I thought it was beacuse i took the Compmgmt.msc file from the server - but i navigated to one of the machines that arent supposed to use the Compmgmt.msc, but still the same result - the Computer administration starts.....
    LVL 2

    Expert Comment

    Can you disallow right click on the Domain Policy on desktop items?

    Author Comment

    Hi DominonTech.

    Where du I do that???

    LVL 57

    Expert Comment

    by:Pete Long

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Better Security Awareness With Threat Intelligence

    See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

    Nslookup is a command line driven utility supplied as part of most Windows operating systems that can reveal information related to domain names and the Internet Protocol (IP) addresses associated with them. In simple terms, it is a tool that can …
    Greetings, Experts! First let me state that this website is top notch. I thoroughly enjoy the community that is shared here; those seeking help and those willing to sacrifice their time to help. It is fantastic. I am writing this article at th…
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now