Avatar of detox1978
detox1978Flag for United Kingdom of Great Britain and Northern Ireland asked on

Allow user to run taskpad

Hi All,

We have a policy in place that restricts MMC's from running.

We now have a requirement to let two users run an AD taskpad to manage a few security groups.

Is it possible to allow only this taskpad to be run?

I found these to KB articles
http://support.microsoft.com/kb/271135
http://support.microsoft.com/kb/931865


Many thanks
Windows Server 2003Active DirectoryMicrosoft Server OS

Avatar of undefined
Last Comment
Toni Uranjek

8/22/2022 - Mon
Toni Uranjek

Hi detox1978,

No, taskpad is only snap-in for MMC. If you don't allow mmc.exe to run, you won't be able to open taskpad.

If you are using GPO to enable such restriction, you could use Security Filtering to deny propagation of policy to certain users/group. This might not be usefull, if your "prohibit mmc" policy has many other settings configured, because none would apply in this case. You would have to create separate GPO with single setting and then use Security Filtering.

HTH

Toni
ASKER CERTIFIED SOLUTION
Kyle Abrahams

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
ASKER
detox1978

Where in Group Policy is the MMC restriction made?


As i will have to move that setting to a new policy and filter it for the users that need to be exempt.
Toni Uranjek

I don't know how exactly is mmc disabled in you environment. It could be under Software Restriction Policies which apply to computer accounts, I'm guessing that your policy affects users, then it has to be set under:
User configuration\Administrative templates\System\Don't run specified Windows application
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy