Restrict access to author mode in MMC

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To restrict access to author mode in MMC

  1. Open MMC.

  2. On the File menu, click Add/Remove Snap-in, and then click Add.

  3. Under Snap-in, click Group Policy Object Editor, and then click Add.

  4. In the Select Group Policy wizard, do one of the following:

    • To edit the local Group Policy Object, leave the Group Policy Object box set to Local Computer, and then click Finish.

    • To specify a different Group Policy Object, click Browse, select the object, click OK, and then click Finish.

  5. Click Finish, click Close, and then click OK.

    The Group Policy Object Editor snap-in opens the specified Group Policy Object Editor.

  6. In the console tree, click Microsoft Management Console.

    Where?

    • PolicyName Policy/User Configuration/Administrative Templates/Windows Components/Microsoft Management Console
  7. In the details pane, double-click Restrict the user from entering author mode.

  8. On the Setting tab, do one of the following:

    • To allow the user to use author mode in MMC, click Not Configured or Disabled.

    • To restrict the user from using author mode in MMC, click Enabled.

Notes

  • To open MMC, click Start, click Run, type mmc, and then click OK.

  • Once Restrict the user from entering author mode has been enabled, any attempt to reaccess the console results in an error message indicating blocked access to the console in author mode. Users with administrator credentials can regain access to author mode by clicking Start/Run/gpedit.msc which opens the Group Policy Object Editor for local computer policy. Next, click User Configuration/Administrative Templates/Windows Components/Microsoft Management Console. Then double-click Restrict the user from entering author mode in the details pane. Unclick the radio button Enabled so that either Not Configured or Disabled has been selected.

  • This feature applies only in a network where Group Policy Object Editor has been configured; a system administrator must enable Group Policy Object Editor. Not available in Windows XP Home Edition.

  • For more information, click the Explain tab in the Restrict the user from entering author mode properties dialog box, and see Help.

Information about functional differences

  • Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.

See Also

Concepts

Add a snap-in to a new MMC console for a local computer
Setting Group Policy in MMC
Group Policy (pre-GPMC)