Solved

How to deny or disable access to the MMC console for the Domain users?

Posted on 2009-06-29
3
632 Views
Last Modified: 2012-05-07
I would like to stop domain users to access the MMC console and view all the user/computer objects in the Active directory. As a default any domain users can install adminpak in the computer then configure the MMC console and he would be able to access and view everything? I want to restrict this for the Domain users who have Local administrator right in their computers?

Is there a solution? Please help .... Thanks
0
Comment
Question by:Scorpion39
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 74

Accepted Solution

by:
Glen Knight earned 500 total points
ID: 24742444
If you are able to create a group policy in the user settings section under administrative templates you are able to prevent access to MMC snapins.

0
 

Author Comment

by:Scorpion39
ID: 24742458
Thanks demazter, I will try it and come back ....
0
 

Author Comment

by:Scorpion39
ID: 24742637
It is working perfectly. Thanks for your quick response.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.
Suggested Courses

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question