Blocking non admin users from connecting to MMC from a remote PC

[Guest]

Hi All

I would like to block non admin users from connecting to Microsoft
Management Console(MMC.exe) from a remote PC

when I went to
User Config\Administrative Templates\System\Don't run specific application
and specified mmc.exe
It blocked everyone including administrator
from running the mmc.exe.
How can I block only non-admin users from running it.

There are many users and I know who are the administrators
but I do not have the list of non-admins
How can I achieve it.


Thanks In Advance
Kiran

 

[Andrew Mitchell]

Hi All

I would like to block non admin users from connecting to Microsoft
Management Console(MMC.exe) from a remote PC

when I went to
User Config\Administrative Templates\System\Don't run specific application
and specified mmc.exe
It blocked everyone including administrator
from running the mmc.exe.
How can I block only non-admin users from running it.

There are many users and I know who are the administrators
but I do not have the list of non-admins
How can I achieve it.

Use the same GPO and filter it based on security groups. Set the "Apply Group
Policy" to Deny for domain admins.

 

[Guest]

Thanks for the info
If I am an administrator on a local machine
Can I restrict users from conecting to my PC using MMC in their PCs and view
the User groups and other stuff in my PC
I do not have acces to GPO at the OU level

Thanks in advance
KIran