Link to home
Create AccountLog in
Avatar of detox1978
detox1978Flag for United Kingdom of Great Britain and Northern Ireland

asked on

Allow user to run taskpad

Hi All,

We have a policy in place that restricts MMC's from running.

We now have a requirement to let two users run an AD taskpad to manage a few security groups.

Is it possible to allow only this taskpad to be run?

I found these to KB articles
http://support.microsoft.com/kb/271135
http://support.microsoft.com/kb/931865


Many thanks
Avatar of Toni Uranjek
Toni Uranjek
Flag of Slovenia image

Hi detox1978,

No, taskpad is only snap-in for MMC. If you don't allow mmc.exe to run, you won't be able to open taskpad.

If you are using GPO to enable such restriction, you could use Security Filtering to deny propagation of policy to certain users/group. This might not be usefull, if your "prohibit mmc" policy has many other settings configured, because none would apply in this case. You would have to create separate GPO with single setting and then use Security Filtering.

HTH

Toni
ASKER CERTIFIED SOLUTION
Avatar of Kyle Abrahams, PMP
Kyle Abrahams, PMP
Flag of United States of America image

Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
Avatar of detox1978

ASKER

Where in Group Policy is the MMC restriction made?


As i will have to move that setting to a new policy and filter it for the users that need to be exempt.
I don't know how exactly is mmc disabled in you environment. It could be under Software Restriction Policies which apply to computer accounts, I'm guessing that your policy affects users, then it has to be set under:
User configuration\Administrative templates\System\Don't run specified Windows application