Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

How to deny or disable access to the MMC console for the Domain users?

Posted on 2009-06-29
3
Medium Priority
?
638 Views
Last Modified: 2012-05-07
I would like to stop domain users to access the MMC console and view all the user/computer objects in the Active directory. As a default any domain users can install adminpak in the computer then configure the MMC console and he would be able to access and view everything? I want to restrict this for the Domain users who have Local administrator right in their computers?

Is there a solution? Please help .... Thanks
0
Comment
Question by:Scorpion39
  • 2
3 Comments
 
LVL 74

Accepted Solution

by:
Glen Knight earned 2000 total points
ID: 24742444
If you are able to create a group policy in the user settings section under administrative templates you are able to prevent access to MMC snapins.

0
 

Author Comment

by:Scorpion39
ID: 24742458
Thanks demazter, I will try it and come back ....
0
 

Author Comment

by:Scorpion39
ID: 24742637
It is working perfectly. Thanks for your quick response.
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
A bad practice commonly found during an account life cycle is to set its password to an initial, insecure password. The Password Reset Tool was developed to make the password reset process easier and more secure.
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

927 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question