TipHKCU\Software\Policies\Microsoft\MMC\<Class-ID>
| Data type | Range | Default value |
|---|---|---|
| REG_DWORD | 0 | 1 | (Not in registry) 0 |
Permits or prohibits use of this snap-in.
This entry stores the setting of a policy in the Restricted/Permitted snap-ins folders in Group Policy. Each policy in the folder represents a snap-in, a snap-in extension, or a Group Policy component. When you enable a policy in the folder, Group Policy adds the Restrict_Run entry to the <Class-ID> subkey for the named snap-in or component and sets its value to 1. If you disable the policy, Group Policy adds the Restrict_Run entry and sets its value to 0. If you set the policy to Not configured, Group Policy deletes the entry from the registry.
| Value | Meaning |
|---|---|
| 0 | Prohibits use of the snap-in. |
| 1 | Permits use of the snap-in. |
| (Not in registry) | When the value of RestrictToPermittedSnapins is 1, this snap-in is prohibited. Otherwise, the snap-in is permitted. |
By default, users can use all of the snap-ins. However, you can prohibit access to a particular snap-in by disabling its policy in the Restricted/Permitted snap-ins Group Policy folder. When you disable the policy, Group Policy sets the value of Restrict_Run to 0. As a result, the system does not run that snap-in.
However, if you enable the Restrict users to the explicitly permitted list of snap-ins policy, users cannot run any snap-ins unless the value of Restrict_Run is 1. All other snap-ins are prohibited. To add Restrict_Run to the registry with a value of 1, enable the policy for that snap-in in the Restricted\Permitted snap-ins folder.
To change the value of this entry, use Group Policy. This entry corresponds to the <Snap-in-name> policy (User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins or its subfolders).
Tip
See a list of the Class ID subkeys and the snap-ins they represent.
.To prohibit users from gaining access to any snap-ins, enable the Restrict users to the explicitly permitted list of snap-ins policy (User Configuration\Administrative Templates\Windows Components\Microsoft Management Console), and do not configure any of the policies in the Restricted\Permitted snap-ins folder. You do not have to disable the policies.
For detailed information about particular Group Policy settings, see the Group Policy Reference (Gp.chm) on the Windows 2000 Resource Kit companion CD.
For general information about Group Policy, see Group Policy in Windows 2000 Help.
To see a table associating policies with their corresponding registry entries, see the Group Policy Reference Table.
Related Entries
