Group Policy: Restrict Users to Explicitly... How to add a custom SnapIn to this list

[Heggy]

By default, we deny all staff/students from running MMC. We've now got a situation, where we're planning on allowing 1 teacher to run 1 custom MMC on 1 specific computer.

I was hoping to do it by setting:

Admin Templates | Microsoft Management Console | Restrict users to the explicitly permitted list of snapins.

and adding the custom snapin.

 

 

But i can't find where to add a custom made snapin to the 'allow' list. Anyone know if i can do it this way/done it another way?

Do i have to create a custom ADM file to get it to work?

or have a missed a blindingly obvious GP setting somewhere?

 

Thanks

[Heggy]

Answered own question, bit more persistence with google:

 

How to Add custom MMC "Snap-Ins" in GPO (Windows 2003 AD) : mmc, restricted, snap