次の方法で共有


Permit or restrict access to a snap-in for a domain

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To permit or restrict access to a snap-in for a domain

  1. Open Active Directory Users and Computers.

  2. In the console tree, right-click the organizational unit for which you want to configure policy, and then click properties.

  3. On the Group Policy tab, click Edit.

    The Group Policy Object Editor appears.

  4. In the console tree, click Restricted/Permitted snap-ins.

    Where?

    • PolicyName Policy/User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins
  5. In the details pane, double-click the snap-in that you want to permit or restrict, and then do one of the following:

    • To enable the user to access this snap-in (unless the user is restricted by the Restrict users to the explicitly permitted list of snap-ins policy), click Not Configured.

    • To permit the user to access this snap-in, click Enabled.

    • To restrict the user from accessing this snap-in, click Disabled.

Notes

  • To open Active Directory Users and Computers, click Start, point to programs, point to Administrative Tools, and then click Active Directory Users and Computers.

  • Active Directory is not available in Windows XP Professional or Windows XP Home Edition.

  • This feature applies only in a network where Group Policy Object Editor has been configured. You must be a domain Administrator, or have administrative credentials, and use a computer configured as a domain controller to configure Group Policy Object Editor for a domain.

  • When you restrict or explicitly permit access to a snap-in, the snap-in is added to a list of restricted or permitted snap-ins. The restricted list takes precedence over the permitted list, so that if the same snap-in exists on both lists, access to the snap-in is restricted.

  • For more information, click the Explain tab in the snap-in properties dialog box, and see Help.

Information about functional differences

  • Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.

See Also

Concepts

Add a snap-in to a new MMC console for a local computer
Setting Group Policy in MMC
Restrict access to a permitted list of snap-ins for a domain
Group Policy (pre-GPMC)