Export (0) Print
Expand All

Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\ Class-ID

Data type

Range

Default value

REG_DWORD

0 | 1

(Not in registry) 0

Description

Permits or prohibits use of this snap-in.

This entry stores the setting of a policy in the Restricted/Permitted snap-ins folder in Group Policy. Each policy in the folder represents a snap-in, a snap-in extension, or a Group Policy component. When you enable a policy in the folder, Group Policy adds this entry to the Class-ID subkey for the named snap-in or component, and it sets the value of this entry to 1. If you disable the policy, Group Policy adds this entry, and it sets the value of this entry to 0. If you set the policy to Not configured, Group Policy deletes the entry from the registry.

Value

Meaning

0

Prohibits use of the snap-in.

1

Permits use of the snap-in.

(Not in registry)

When the value of the RestrictToPermittedSnapins entry is 1, this snap-in cannot be used. Otherwise, this snap-in can be used.

By default, users can use all of the snap-ins. However, you can prohibit access to a particular snap-in by disabling its policy in the Restricted/Permitted snap-ins Group Policy folder. When you disable the policy, Group Policy sets the value of this entry to 0. As a result, the system does not run that snap-in.

However, if you enable the Restrict users to the explicitly permitted list of snap-ins policy, users cannot run a snap-in unless the value of this entry is 1. All other snap-ins are prohibited. To add this entry to the registry with a value of 1, enable the policy for that snap-in in the Restricted/Permitted snap-ins folder.

Change method

To change the value of this entry, use Group Policy. This entry corresponds to the Snap-in-name Group Policy (User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins or its subfolders).

Tip Image Tip

See a list of the Class-ID subkeys and the snap-ins they represent.

To prohibit users from gaining access to any snap-ins, enable the Restrict users to the explicitly permitted list of snap-ins Group Policy (User Configuration\Administrative Templates\Windows Components\Microsoft Management Console), and do not configure any of the policies in the Restricted/Permitted snap-ins folder. You do not have to disable the policies.

For detailed information about particular Group Policy settings, see the Windows 2000 Resource Kit Group Policy Reference.

For general information about Group Policy, see Windows 2000 Server Help or Windows 2000 Professional Help.

To see a table associating policies with their corresponding registry entries, see the Group Policy Registry Table .

Related Entries

Page Image

RestrictToPermittedSnapins

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft