Restrict acces to Computer Management

Is it possible to restrict users from accesing the Computer Management via right click - My computer - Manage ???

Either via GPO og Regisrty????


Who is Participating?
Pete LongConnect With a Mentor Technical ConsultantCommented:
Yes - use a software restriction polict in GPO

restrict access to  Compmgmt.msc

Software Restriction Policies
Blocking Programs, Executables and scripts

Software restriction policies can be applied to just about any program script or file, the big advantage to using this method is, it digitally fingerprints the file so if you have a “clever user” even changing the executable or file name wont let them run it.

As With all policies you can deploy them locally on each machine (start > run > gpedit.msc) or for everyone at once via the Domain Group Policy (AD users and computers or GPMC (group policy management console)

Whilst in The Policy Manager (either local or domain)

Navigate to

Computer Configuration\Windows Settings\Security Settings\Software Restriction Policies

By Default there is nothing there

Click Action  > Create New Policy
Right Click Additional Rules > Create Hash Rule
Click the Browse Button
Navigate to the Executable/Program you want to stop users using.
Click OK
Set the Security Level to “Disallowed”
Click Apply > OK

HK-DKAuthor Commented:
Hmmm it wont work....

First I thought it was beacuse i took the Compmgmt.msc file from the server - but i navigated to one of the machines that arent supposed to use the Compmgmt.msc, but still the same result - the Computer administration starts.....
Can you disallow right click on the Domain Policy on desktop items?
HK-DKAuthor Commented:
Hi DominonTech.

Where du I do that???

Pete LongTechnical ConsultantCommented:
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.