How do I restrict users from using the 'Active Directory Users and Computers MMC' snap-in? (NETIQKB39553)

  • 7739553
  • 02-Feb-2007
  • 19-Jun-2007

Resolution

goal
How do I restrict users from using the 'Active Directory Users and Computers MMC' snap-in?

fact
NetIQ Group Policy Administrator 5.0

fact
Directory and Resource Administrator 6.x

fact
Directory and Resource Administrator 7.x

fix

Group Policies allow the means to limit which Microsoft Management Console (MMC) snap-in can be executed.  This is found in a Group Policy Object (GPO) for any given Organizational Unit (OU) in the following location and is called Restricted/Permitted Snapins:

  •  User Configuration\Administrative Templates\Windows Components\Microsoft Management Console

The following Microsoft Documentation details how to restrict access to a permitted list of snap-ins for a domain:



Additional Information

Formerly known as NETIQKB39553