Re: GPO locked DC. MMC snap-ins will not create

MMC restrictions are stored under HKCU\Software\Policies\Microsoft\MMC\. Each restricted snap-in will have a GUID-named Key under that key and then within each GUID-named key is a value called restrictRun. The easiest way to disable these restrictions is to simply nuke all the keys under the MMC key in that path I just gave. Once you do that, your snap-ins should be able to load for the logged on user and then you can modify the GPO to remove the restrictions. Note that you need to be an admin on the box to delete these keys.

Darren
--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy

Simplify Group Policy Troubleshooting with the NEW GPExpert Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php

Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related

"James Wright" <CMCGroup@xxxxxxxxxxxxxx> wrote in message news:7F881B11-04A2-4753-AB5C-AC736E2FF9B8@xxxxxxxxxxxxxxxx
It was named something "MMC". I don't know how to proceed from here. It
restricts all snap-in except for defragmenter.




"Florian Frommherz [MVP]" wrote:

Howdie!

James Wright schrieb:
> Do you know which reg key I can delete to undo the MMC restriction?

That depends on what restrictions you made. If you still know the
policy's name you set, you can search the name in the ADM template files
located at %windir%\inf and see which registry key it alters.

If you have no clue on how you should proceed now just feel free to post
back. If you provide the Group Policy settings that you made your
restrictions, we'll be able to sort things out for you and tell you
which keys you need to alter.

cheers,

Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.


.

Relevant Pages

  • Weird Group Policy and MMC snap-in issue.
    ... I seem to have an odd issue regarding Group Policy and MMC snap-in ... I have created a new group policy object and filtered it by a group ... I cannot find any references to "Folder" in the group policy or any ...
    (microsoft.public.win2000.active_directory)
  • Group Policy & MMC restictions
    ... I seem to have an odd issue regarding Group Policy and MMC snap-in ... The system has a simple user policy that restricts users from running ... MMC snap-ins unless explicitly enabled using "Restrict users to the ... I have created a new group policy object and filtered it by a group ...
    (microsoft.public.win2000.group_policy)
  • Re: Group Policy Failed to Initialize in WXP Pro SP2
    ... Restart the computer and try to open Group Policy again. ... possibly have any effect that I haven't got Group Policy in my WXP Pro ... Will it install even if I do find it? ... Once the content has been modified, restart your computer and try to open Group Policy snap-in or to re-register Gpedit.dll again. ...
    (microsoft.public.windowsxp.general)
  • Re: Group Policy Failed to Initialize in WXP Pro SP2
    ... Once the content has been modified, restart your computer and try to open Group Policy snap-in or to re-register Gpedit.dll again. ... Microsoft MVP [Windows XP Shell/User] ... I've been looking for it all night - it's not in my install of Management ...
    (microsoft.public.windowsxp.general)