+ Post New Thread
Results 1 to 8 of 8
Windows Server 2008 Thread, MMC Group Policy in Technical; Hello, We currently have a group policy for MMC snap-ins which is set to "Restrict users to the explicitly permitted ...
  1. #1

    Join Date
    Dec 2009
    Posts
    270
    Thank Post
    6
    Thanked 33 Times in 31 Posts
    Rep Power
    15

    MMC Group Policy

    Hello,

    We currently have a group policy for MMC snap-ins which is set to "Restrict users to the explicitly permitted list of snap-ins"

    From here we obviously list all the snap-ins they are allowed to access. We now have a request to allow access to a new App-V snap-in.

    The issue I have is this snap-in obviously isn't in the list to allow. By default if it has not been allowed it will be denied, so anyone trying to access the App-V snap-in gets the "This has been restricted by policy". The only way I can see around this, is to change the option "Restrict users to the explicitly permitted list of snap-ins" to disabled so all snap-ins are available, then put a deny on all those I don't wish to open up. As App-v is not on the list, it will now be allowed by default.

    My issue is, I am now open for any future snap-ins to be run and will have no way to restrict them.

    Anyone else got a similar setup.

  2. #2

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,227
    Thank Post
    893
    Thanked 1,776 Times in 1,532 Posts
    Blog Entries
    12
    Rep Power
    461
    If you open group policy editor from a machine with the app-v MMC installed do you see an option for it in group policy?

  3. #3

    Join Date
    Dec 2009
    Posts
    270
    Thank Post
    6
    Thanked 33 Times in 31 Posts
    Rep Power
    15
    Thought you were onto something then, unfortunately it seems even when running from a Windows 7 machine with the client install, group policy doesn't show me thios option

  4. #4

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,227
    Thank Post
    893
    Thanked 1,776 Times in 1,532 Posts
    Blog Entries
    12
    Rep Power
    461
    Im out of ideas then, sorry

  5. #5

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,240
    Thank Post
    882
    Thanked 2,742 Times in 2,316 Posts
    Blog Entries
    11
    Rep Power
    784
    RSAT installed on the client with the appv snapin?

  6. #6

    Join Date
    Dec 2009
    Posts
    270
    Thank Post
    6
    Thanked 33 Times in 31 Posts
    Rep Power
    15
    Well I logged an advisory call with Microsoft, and have been told this is not currently possible with a default GPO setting - They believe there is a registry setting that can be set via Group Policy Preference to enabled this. Currently waiting to be sent this info, but will update here when I've had chance to test to see if this works as expected.

  7. #7

    Join Date
    Dec 2009
    Posts
    270
    Thank Post
    6
    Thanked 33 Times in 31 Posts
    Rep Power
    15
    Nice simple reg key fix in the end

    [HKEY_CURRENT_USER\Software\Policies\Microsoft\MMC\ {F7E7A18B-F9AA-45C7-A234-CE2082268844}]
    "Restrict_Run"=dword:00000000

  8. Thanks to Firefox from:

    FN-GM (10th July 2012)

  9. #8

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,227
    Thank Post
    893
    Thanked 1,776 Times in 1,532 Posts
    Blog Entries
    12
    Rep Power
    461
    Thanks for letting us know

SHARE:
+ Post New Thread

Similar Threads

  1. .Net Trust Level by Group Policy
    By daverage in forum Wireless Networks
    Replies: 0
    Last Post: 31st January 2006, 11:10 AM
  2. Trusted Sites via Group Policies?
    By mullet_man in forum Wireless Networks
    Replies: 5
    Last Post: 12th January 2006, 02:42 PM
  3. Sort By Name Group Policy
    By mattpant in forum Wireless Networks
    Replies: 6
    Last Post: 16th November 2005, 02:59 PM
  4. Blocking Batch Files using Group Policy in Server 2003
    By markwilliamson2001 in forum Windows
    Replies: 13
    Last Post: 4th October 2005, 05:28 PM
  5. Group Policy Settings Examples
    By mattpant in forum Wireless Networks
    Replies: 20
    Last Post: 17th September 2005, 11:12 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •