Permit or restrict access to a snap-in for a domain

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To permit or restrict access to a snap-in for a domain

Open Active Directory Users and Computers.
In the console tree, right-click the organizational unit for which you want to configure policy, and then click properties.
On the Group Policy tab, click Edit.

The Group Policy Object Editor appears.
In the console tree, click Restricted/Permitted snap-ins.

Where?
- PolicyName Policy/User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins
In the details pane, double-click the snap-in that you want to permit or restrict, and then do one of the following:
- To enable the user to access this snap-in (unless the user is restricted by the Restrict users to the explicitly permitted list of snap-ins policy), click Not Configured.
- To permit the user to access this snap-in, click Enabled.
- To restrict the user from accessing this snap-in, click Disabled.

Notes

To open Active Directory Users and Computers, click Start, point to programs, point to Administrative Tools, and then click Active Directory Users and Computers.
Active Directory is not available in Windows XP Professional or Windows XP Home Edition.
This feature applies only in a network where Group Policy Object Editor has been configured. You must be a domain Administrator, or have administrative credentials, and use a computer configured as a domain controller to configure Group Policy Object Editor for a domain.
When you restrict or explicitly permit access to a snap-in, the snap-in is added to a list of restricted or permitted snap-ins. The restricted list takes precedence over the permitted list, so that if the same snap-in exists on both lists, access to the snap-in is restricted.
For more information, click the Explain tab in the snap-in properties dialog box, and see Help.

Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.