Link to home
Start Free TrialLog in
Avatar of jeffd001
jeffd001

asked on

How to Add custom MMC "Snap-Ins" in GPO (Windows 2003 AD)

Hello,

I currently use a GPO to restrict users from loading Snap-Ins in the MMC.
But I would like to allow some only two or three specific custom non Microsoft Snap-Ins to be run by some users.

How could I add these custom snap-ins in the GPO in the following entry :

User Configuration/Administrative Templates/Microsoft Management Console/Restricted/Permitted snap-ins



Many thanks for your help.
Jeff

Avatar of Phadke_hemant
Phadke_hemant
Flag of India image

Here you cannot add the user defined custom entries.
Avatar of jeffd001
jeffd001

ASKER

Is there any way to define and allow a custom snap-ins to be run via the GPO ?
ASKER CERTIFIED SOLUTION
Avatar of MarkusKolbeck
MarkusKolbeck

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Hello Markus,

Yes you're right, I mean exactly adding a 3rd party snap-ins in the MMC, which is not listed.

I tested your solution setp-by-step and it works perfectly ! Many thanks !!
The only things which is remaining is that each time I open the corresponding snap-in, I get a MMC Message saying "The snap-in below, referenced in this document has been restricted by policy. Contact your administrator for details." with only a OK button. I click OK and the snap-ins open and works.

Is it a normal behavior or is there a possibility to prevent this message from appearing ?

Jeff
Hi Jeff,

is the referenced Class ID (CLSID) in the mmc "Snap-In Creation Failed"-Window the exact same as the one you restricted?
(In my example {AE1F876B-4B9A-4235-80A3-9DC8441ABF99})

In my case (with the snap-in from CenterTools) it works perfectly ... The mmc opens and the snap-in does not work.
If I open the mmc and try to add the snap-in manually it is not listed (with the policy setting configured to "disabled").

I don't think you can disable this error message after all.

ATB
Markus
Hello Markus,

Yes, the Class ID is exactly the same.
The Snap-in load and function correctly, the only "annoying" problem is that each time you open it, you get this message and you need to click OK.

Jeff
Hi Jeff,

I agree, but unfortunately I do not know any solution for disabling those popups.

ATB
Markus
Hi Markus,

OK.

Thanks again for your help!
Jeff
No problem.

Cheers

Markus
Is anybody able to update this for a Win2K8 server?

As it does not use adm files but ADMX there is no system.adm file.

I have found mmc.admx, MMCSnapins.admx and MMCSnapins2.admx but these do not contain a list of the contents of the Restrcted/Permitted Snapins List