jeffd001
asked on
How to Add custom MMC "Snap-Ins" in GPO (Windows 2003 AD)
Hello,
I currently use a GPO to restrict users from loading Snap-Ins in the MMC.
But I would like to allow some only two or three specific custom non Microsoft Snap-Ins to be run by some users.
How could I add these custom snap-ins in the GPO in the following entry :
User Configuration/Administrati ve Templates/Microsoft Management Console/Restricted/Permitt ed snap-ins
Many thanks for your help.
Jeff
I currently use a GPO to restrict users from loading Snap-Ins in the MMC.
But I would like to allow some only two or three specific custom non Microsoft Snap-Ins to be run by some users.
How could I add these custom snap-ins in the GPO in the following entry :
User Configuration/Administrati
Many thanks for your help.
Jeff
Here you cannot add the user defined custom entries.
ASKER
Is there any way to define and allow a custom snap-ins to be run via the GPO ?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Hello Markus,
Yes you're right, I mean exactly adding a 3rd party snap-ins in the MMC, which is not listed.
I tested your solution setp-by-step and it works perfectly ! Many thanks !!
The only things which is remaining is that each time I open the corresponding snap-in, I get a MMC Message saying "The snap-in below, referenced in this document has been restricted by policy. Contact your administrator for details." with only a OK button. I click OK and the snap-ins open and works.
Is it a normal behavior or is there a possibility to prevent this message from appearing ?
Jeff
Yes you're right, I mean exactly adding a 3rd party snap-ins in the MMC, which is not listed.
I tested your solution setp-by-step and it works perfectly ! Many thanks !!
The only things which is remaining is that each time I open the corresponding snap-in, I get a MMC Message saying "The snap-in below, referenced in this document has been restricted by policy. Contact your administrator for details." with only a OK button. I click OK and the snap-ins open and works.
Is it a normal behavior or is there a possibility to prevent this message from appearing ?
Jeff
Hi Jeff,
is the referenced Class ID (CLSID) in the mmc "Snap-In Creation Failed"-Window the exact same as the one you restricted?
(In my example {AE1F876B-4B9A-4235-80A3-9 DC8441ABF9 9})
In my case (with the snap-in from CenterTools) it works perfectly ... The mmc opens and the snap-in does not work.
If I open the mmc and try to add the snap-in manually it is not listed (with the policy setting configured to "disabled").
I don't think you can disable this error message after all.
ATB
Markus
is the referenced Class ID (CLSID) in the mmc "Snap-In Creation Failed"-Window the exact same as the one you restricted?
(In my example {AE1F876B-4B9A-4235-80A3-9
In my case (with the snap-in from CenterTools) it works perfectly ... The mmc opens and the snap-in does not work.
If I open the mmc and try to add the snap-in manually it is not listed (with the policy setting configured to "disabled").
I don't think you can disable this error message after all.
ATB
Markus
ASKER
Hello Markus,
Yes, the Class ID is exactly the same.
The Snap-in load and function correctly, the only "annoying" problem is that each time you open it, you get this message and you need to click OK.
Jeff
Yes, the Class ID is exactly the same.
The Snap-in load and function correctly, the only "annoying" problem is that each time you open it, you get this message and you need to click OK.
Jeff
Hi Jeff,
I agree, but unfortunately I do not know any solution for disabling those popups.
ATB
Markus
I agree, but unfortunately I do not know any solution for disabling those popups.
ATB
Markus
ASKER
Hi Markus,
OK.
Thanks again for your help!
Jeff
OK.
Thanks again for your help!
Jeff
No problem.
Cheers
Markus
Cheers
Markus
Is anybody able to update this for a Win2K8 server?
As it does not use adm files but ADMX there is no system.adm file.
I have found mmc.admx, MMCSnapins.admx and MMCSnapins2.admx but these do not contain a list of the contents of the Restrcted/Permitted Snapins List
As it does not use adm files but ADMX there is no system.adm file.
I have found mmc.admx, MMCSnapins.admx and MMCSnapins2.admx but these do not contain a list of the contents of the Restrcted/Permitted Snapins List