MMC/Active Directory Snap In (customized)

I'm trying to create a customized snapin for certain users to be able to grant them access to change passwords for student accounts.  I have an old one that does this but it also shows them the entire active directory (although they can't do anything but change student passwords) which I don't want them to be able to see.  It's been ages since I even created a snap in and I can basically run MMC, add the users/groups snap in and thats as much as I can remember.
gilmanschoolAsked:
Who is Participating?
 
MSE-dwellsCommented:
Nod, you're correct ... that's a bug ... one that I wasn't aware of but easy enough to work around.  I'd suggest that you're best off combining the restricted view with a taskpad containing only the menu options you select ... it takes only a few seconds to do.  If you prefer to resolve only this immediate problem then simply open the saved console in 'author' mode by right clicking it and selecting 'Author', select View --> Customize and decheck Standard Menus.

Seriously though, consider using the Taskpad and restricting their choice to only those menu options you designate (reset password being one of them).
0
 
MSE-dwellsCommented:
I believe you're referring to 'Taskpad Views', once the snapin is added, go to the action menu and select 'New Taskpad View' and follow the wizard.  Once complete, set the console mode and name as you see fit and check the box to prevent changes.
0
 
gilmanschoolAuthor Commented:
I did that but how do you export that as an mmc file?  If i export it exports the entire directory tree, but with that taskpad view on the side.
0
Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

 
MSE-dwellsCommented:
If you're only interested in constraining what they see, then simply highlight the OU, select Action-->New Window from here.  Select the Window menu, select the original and close it down ... configure the options as I said before and save the console.
0
 
gilmanschoolAuthor Commented:
I can do that, but the user can still go to the Window menu and choose to view everything.
0
 
MSE-dwellsCommented:
Not if you follow my earlier instructions more closely -

* select File --> Options --> Console mode = User mode, limited access, single window ... then decheck 'Allow the user to customize views' and check 'Do not save changes'
0
 
gilmanschoolAuthor Commented:
I swear that's what I did and when the mmc file is ran, you can simple go to "view" and select "users, groups and computers" as containers and that brings the entire AD view back.
0
 
gilmanschoolAuthor Commented:
With the taskpad and the "new menu from here" plus the the view and removing the menus, I got it now.  thanks alot!

-Dave
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.