Share via

Scripts (Logon/Logoff)

  • Article

User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins

Description

Permits or prohibits use of the Group Policy settings that use the Logon/Logoff Scripts client side extension.

  • If you enable this policy, Logon/Logoff Scripts policies are permitted.
  • If you disable the policy, Logon/Logoff Scripts policies are prohibited.
  • If this policy is not configured, the setting of the Restrict users to the explicitly permitted list of snap-ins policy determines whether Logon/Logoff Scripts policies are permitted or prohibited.

If Restrict users to the explicitly permitted list of snap-ins is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of Logon/Logoff Scripts policies, enable this policy. If this policy is not configured (or disabled), Logon/Logoff Scripts policies are prohibited.

If Restrict users to the explicitly permitted list of snap-ins is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of Logon/Logoff Scripts policies, disable this policy. If this policy is not configured (or enabled), Logon/Logoff Scripts policies are permitted.

When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.