TaskPad View for Active Directory computers and users still editable

iamuser
iamuser used Ask the Experts™
on
I created custom a MMC Taskpad for ADUC, and before saving, selected the options below
console-setting.png
but when I log as a user, I can right click on the saved mmc and select 'author', which gives me the ability to change things. I can't figure out why I can't lock the mmc.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Most Valuable Expert 2018
Distinguished Expert 2018
Commented:
You're just changing the default mode the msc will be opened in (and nothing will keep the user from just creating his own msc anyway).
If you want to prevent users from creating their own mscs (aka starting mmc.exe in author mode), you need to apply a group policy:
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console, "Restrict the user from entering author mode".

Author

Commented:
thanks, do you know of a way to lock the view so it's not editable?
Most Valuable Expert 2018
Distinguished Expert 2018

Commented:
Please clarify "lock the view so it's not editable".
If you want to centrally provide a customized msc to helpdesk users, put it in a share where the users don't have Write permissions.
What is it exactly you're trying to achieve here?
The MMC is just a tool; the Taskpad mode and its restrictions are not a replacement for proper delegation of permissions.
Your users should be able to add/remove whatever snapins they want, without being able to do any damage to anything.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial