Re: cannot open Console1.msc

From: David Everett [MSFT] (deverett_at_online.microsoft.com)
Date: 03/30/04 

Date: Tue, 30 Mar 2004 09:38:12 -0600

It sounds like the group policy setting called "Restrict the user from
entering author mode" has been set to Enabled under User
Configuration\Administrative Templates\Windows Components\Microsoft
Management Console.

If you can edit the GPO applied to the OU where the Terminal Server is
located, try setting "Restrict the user from entering author mode" to
Disabled. Once replication of the policy change has occurred it should
apply at next logon. Then you should be able to open the snap-in.

If this does not work, place your user account and the terminal server into
the new OU and Disable this policy setting then reboot the terminal server
and logon with your user account.

What operating system is the Terminal Server running? 

-- 
David Everett
Microsoft Corporation
This posting is provided "AS IS" with no warranties, and confers no rights.
"newuser" <anonymous@discussions.microsoft.com> wrote in message
news:24463249-B950-40CA-A628-DE570B6C0E1F@microsoft.com...
> Hi All,
> I just took over a task of administrating a Terminal Service Server.   The
previous administrator set up a group policy which restricts using of MMC to
open Console1.msc, and running Regedit.exe.  When I tried to open the
Console1.msc as either a local or domain administrator, this message came up
"current policies prevent the Microsoft Management Console from openning in
author mode, contact your administrator for details."
>
> I also put the Terminal Service Server in a new OU and applied a new group
polciy to the OU in a hope that the OU group policy will overwrite the local
one.  But it did not work.  I wonder what I should do to gain access to the
local console1.msc and make changes to the policy.
>
>
> Thanks a lot!

Relevant Pages

  • Re: best method to restrict application execution on terminal servers
    ... I would probably apply a GPO the OU where the terminal server is located. ... You can restrict to users to run only certain apps here: ... User Configuration, Administrative Templates, System. ... You will also need to enable "User Group Policy lookback processing mode" ...
    (microsoft.public.windows.server.active_directory)
  • Re: Confused about policies and profiles
    ... Change the group policy on the User Configuration part to restrict ... group called TS Users and apply to them only and to the Terminal Server ... > I am under the impression that I need to have a profile and/or policy in ...
    (microsoft.public.windows.terminal_services)
  • Re: Setting up new users
    ... could do is to let the users logon as the guest account. ... configured in permissions for a share folder so keep that in mind. ... Use Group Policy to restrict the users further. ...
    (microsoft.public.win2000.security)
  • Re: GP and TS Rights - A couple issues
    ... I have 2 Terminal Server issues I'm dealing with. ... But the GP setting "Restrict Terminal Services Users to a single remote session" is under the "Computer Configuration" settings in GP. ... I really think my lack of AD & Group Policy are my problem here. ... Users are in OU1a & 1b. ...
    (microsoft.public.windows.terminal_services)
  • Re: Applying Group Policy to domain user on Terminal Server
    ... as the GPO is still not applying properly. ... place the Terminal Server in a separate OU ... policy>select the group policy and then click properties. ... called 'Domain Controllers' and this contains the Windows ...
    (microsoft.public.windows.terminal_services)