Windows 7 or XP?
If xp then just deploy adminpak.msi. To the machines that will need it - then remove access to the administrative tools snap ins
EDIT: just read it was xp - so just deploy the msi
I've created an MMC to allow users to change students passwords, and delegated it necessary etc. However, to run this MMC the machine needs the AD snap-in installed.
What's the best way to install this on certain machines only (XP)? Can it be done using MSI?
How does one go about removing access to the admin tools snap-in? GPO?
You should be able to restrict it through gpo to only allow specific MMC things to open. I.e just specify dsa.msc. I will have a poke around to find where the setting is.
That's wicked - I'm some way off sorting out MSI's and images etc, but this will come in handy for when I get to that stage. It's good to be prepared
I think its this
user config/polices/admin templates/windows componets/Microsoft Management Console - then restrict all bar the Active Directory Users and Comps snap in
There are currently 1 users browsing this thread. (0 members and 1 guests)