Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

How to deny or disable access to the MMC console for the Domain users?

Posted on 2009-06-29
3
Medium Priority
?
635 Views
Last Modified: 2012-05-07
I would like to stop domain users to access the MMC console and view all the user/computer objects in the Active directory. As a default any domain users can install adminpak in the computer then configure the MMC console and he would be able to access and view everything? I want to restrict this for the Domain users who have Local administrator right in their computers?

Is there a solution? Please help .... Thanks
0
Comment
Question by:Scorpion39
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 74

Accepted Solution

by:
Glen Knight earned 2000 total points
ID: 24742444
If you are able to create a group policy in the user settings section under administrative templates you are able to prevent access to MMC snapins.

0
 

Author Comment

by:Scorpion39
ID: 24742458
Thanks demazter, I will try it and come back ....
0
 

Author Comment

by:Scorpion39
ID: 24742637
It is working perfectly. Thanks for your quick response.
0

Featured Post

[Webinar] Lessons on Recovering from Petya

Skyport is working hard to help customers recover from recent attacks, like the Petya worm. This work has brought to light some important lessons. New malware attacks like this can take down your entire environment. Learn from others mistakes on how to prevent Petya like worms.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
This process allows computer passwords to be managed and secured without using LAPS. This is an improvement on an existing process, enhanced to store password encrypted, instead of clear-text files within SQL
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Suggested Courses

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question