


If you disable or do not configure the Restrict users to the explicitly permitted list of snap-ins policy setting, all MMC snap-ins are enabled, except MMC snap-ins that you explicitly disable. To explicitly enable an MMC snap-in in Windows VistaĬlick Start, type gpedit.msc in the Start Search box, and then press ENTER. Note If a setting in the "Restricted/Permitted snap-ins" folder is disabled or not configured, the corresponding MMC snap-in is disabled. To explicitly enable an MMC snap-in in Microsoft Windows XPĬlick Start, click Run, type gpedit.msc, and then click OK.Įxpand User Configuration, and then expand Administrative Templates.Įxpand Windows Components, and then click Microsoft Management Console.ĭouble-click Restricted/Permitted snap-ins, and then enable the setting for the MMC snap-in that you want to use. You may enable the Restrict users to the explicitly permitted list of snap-ins policy setting if you want to disable most MMC snap-ins. If you enable the Restrict users to the explicitly permitted list of snap-ins policy setting, all MMC snap-ins are prohibited, except MMC snap-ins that you explicitly enable. Important If you enable the Restrict users to the explicitly permitted list of snap-ins policy setting but do not enable any settings in the "Restricted/Permitted snap-ins" folder, you cannot use any MMC snap-ins. However, before you enable this setting, you must enable the settings in the "Restricted/Permitted snap-ins" folder for MMC snap-ins that you want to use. The Restrict users to the explicitly permitted list of snap-ins Group Policy setting lets you selectively enable or disable specific Microsoft Management Console (MMC) snap-ins.
