Solved

How to deny or disable access to the MMC console for the Domain users?

Posted on 2009-06-29
3
627 Views
Last Modified: 2012-05-07
I would like to stop domain users to access the MMC console and view all the user/computer objects in the Active directory. As a default any domain users can install adminpak in the computer then configure the MMC console and he would be able to access and view everything? I want to restrict this for the Domain users who have Local administrator right in their computers?

Is there a solution? Please help .... Thanks
0
Comment
Question by:Scorpion39
  • 2
3 Comments
 
LVL 74

Accepted Solution

by:
Glen Knight earned 500 total points
ID: 24742444
If you are able to create a group policy in the user settings section under administrative templates you are able to prevent access to MMC snapins.

0
 

Author Comment

by:Scorpion39
ID: 24742458
Thanks demazter, I will try it and come back ....
0
 

Author Comment

by:Scorpion39
ID: 24742637
It is working perfectly. Thanks for your quick response.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Windows 2012 PKI in a hybrid org 3 48
Duplicate SPN records 4 21
AD Sites/AD Replication 11 34
remove computer from using logon script 17 23
This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

803 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question