Group Policy & MMC restictions

  • Thread starter Thread starter chund71
  • Start date Start date
C

chund71

Hello.
I seem to have an odd issue regarding Group Policy and MMC snap-in
which I cannot get my head around. Any help would be highly
appreciated. I've searched the Google groups and found 2 similar
postings from a couple of years back but they don't have any replies
:(
We're running a small isolated 2003 AD system (1 server) and have a
number of XP pro desktops for an accountancy team. We want give the
manager the ability to reset passwords so he doesn't have to call
support to come out.

The system has a simple user policy that restricts users from running
MMC snap-ins unless explicitly enabled using "Restrict users to the
explicitly permitted list of snap-ins" set to enabled. This prevents
users from running any MMCs and works great.

I have created a new group policy object and filtered it by a group
which sets the AD users and computers snap-in to enabled, and added the
manager into the group.

We then created a new MMC and added in the AD Users and
computers snap-in with a filtered view. We saved the MMC and tested it,

but seem to be getting a weird error:
"The snap-in below, referenced in this document has been restricted
by
policy. Contact your administrator for details.
Folder. "

If you click the OK button the MMC loads up fine.
I cannot find any references to "Folder" in the group policy or any
options in the snap-in listed as "Folder".

Please help as I'm stuck and my manager is getting at me as I'm new!
 
Hello (e-mail address removed),

It looks that the new policy will not be applied to your manager. Try to
create a new OU add the GPO to this OU and move the user to this OU.

Best regards

myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
 
Hello (e-mail address removed),

Create a new OU add the new GPO to the OU move the user and test it this
way. The old policy is still active for the user, so move him out of this
OU and it should work.

Best regards

myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
 
Back
Top