Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\ Class-ID
Data type |
Range |
Default value |
|---|---|---|
REG_DWORD |
0 | 1 |
(Not in registry) 0 |
Description
Permits or prohibits use of this snap-in.
This entry stores the setting of a policy in the Restricted/Permitted snap-ins folder in Group Policy. Each policy in the folder represents a snap-in, a snap-in extension, or a Group Policy component. When you enable a policy in the folder, Group Policy adds this entry to the Class-ID subkey for the named snap-in or component, and it sets the value of this entry to 1. If you disable the policy, Group Policy adds this entry, and it sets the value of this entry to 0. If you set the policy to Not configured, Group Policy deletes the entry from the registry.
Value |
Meaning |
|---|---|
0 |
Prohibits use of the snap-in. |
1 |
Permits use of the snap-in. |
(Not in registry) |
When the value of the RestrictToPermittedSnapins entry is 1, this snap-in cannot be used. Otherwise, this snap-in can be used. |
By default, users can use all of the snap-ins. However, you can prohibit access to a particular snap-in by disabling its policy in the Restricted/Permitted snap-ins Group Policy folder. When you disable the policy, Group Policy sets the value of this entry to 0. As a result, the system does not run that snap-in.
However, if you enable the Restrict users to the explicitly permitted list of snap-ins policy, users cannot run a snap-in unless the value of this entry is 1. All other snap-ins are prohibited. To add this entry to the registry with a value of 1, enable the policy for that snap-in in the Restricted/Permitted snap-ins folder.
Change method
To change the value of this entry, use Group Policy. This entry corresponds to the Snap-in-name Group Policy (User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins or its subfolders).
.gif "Tip Image")
Tip
See a list of the Class-ID subkeys and the snap-ins they represent.
To prohibit users from gaining access to any snap-ins, enable the Restrict users to the explicitly permitted list of snap-ins Group Policy (User Configuration\Administrative Templates\Windows Components\Microsoft Management Console), and do not configure any of the policies in the Restricted/Permitted snap-ins folder. You do not have to disable the policies.
For detailed information about particular Group Policy settings, see the Windows 2000 Resource Kit Group Policy Reference.
For general information about Group Policy, see Windows 2000 Server Help or Windows 2000 Professional Help.
To see a table associating policies with their corresponding registry entries, see the Group Policy Registry Table .
Related Entries
.gif "Page Image")