Blocking non admin users from connecting to MMC from a rem..

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi All

I would like to block non admin users from connecting to Microsoft
Management Console(MMC.exe) from a remote PC

when I went to
User Config\Administrative Templates\System\Don't run specific application
and specified mmc.exe
It blocked everyone including administrator
from running the mmc.exe.
How can I block only non-admin users from running it.

There are many users and I know who are the administrators
but I do not have the list of non-admins
How can I achieve it.


Thanks In Advance
Kiran

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

"=?Utf-8?B?S2lyYW4=?=" <Kiran@discussions.microsoft.com> said

> Hi All
>
> I would like to block non admin users from connecting to Microsoft
> Management Console(MMC.exe) from a remote PC
>
> when I went to
> User Config\Administrative Templates\System\Don't run specific application
> and specified mmc.exe
> It blocked everyone including administrator
> from running the mmc.exe.
> How can I block only non-admin users from running it.
>
> There are many users and I know who are the administrators
> but I do not have the list of non-admins
> How can I achieve it.
>

Use the same GPO and filter it based on security groups. Set the "Apply Group
Policy" to Deny for domain admins.

--
Andy.

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Thanks for the info
If I am an administrator on a local machine
Can I restrict users from conecting to my PC using MMC in their PCs and view
the User groups and other stuff in my PC
I do not have acces to GPO at the OU level

Thanks in advance
KIran



"Andrew Mitchell" wrote:

> "=?Utf-8?B?S2lyYW4=?=" <Kiran@discussions.microsoft.com> said
>
> > Hi All
> >
> > I would like to block non admin users from connecting to Microsoft
> > Management Console(MMC.exe) from a remote PC
> >
> > when I went to
> > User Config\Administrative Templates\System\Don't run specific application
> > and specified mmc.exe
> > It blocked everyone including administrator
> > from running the mmc.exe.
> > How can I block only non-admin users from running it.
> >
> > There are many users and I know who are the administrators
> > but I do not have the list of non-admins
> > How can I achieve it.
> >
>
> Use the same GPO and filter it based on security groups. Set the "Apply Group
> Policy" to Deny for domain admins.
>
> --
> Andy.
>