Share via

Group Policy Tab for Active Directory Tools

  • Article

User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy

Description

Permits or prohibits use of the Group Policy tab for Active Directory tools.

  • If you enable this policy, the Group Policy tab for Active Directory tools is permitted.
  • If you disable the policy, the Group Policy tab for Active Directory tools is prohibited.
  • If this policy is not configured, the setting of the Restrict users to the explicitly permitted list of snap-ins policy determines whether the Group Policy tab for Active Directory tools is permitted or prohibited.

If Restrict users to the explicitly permitted list of snap-ins is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of the Group Policy tab for Active Directory tools, enable this policy. If this policy is not configured (or disabled), the Group Policy tab for Active Directory tools is prohibited.

If Restrict users to the explicitly permitted list of snap-ins is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of the Group Policy tab for Active Directory tools, disable this policy. If this policy is not configured (or enabled), the Group Policy tab for Active Directory tools is permitted.

When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.