Weird Group Policy and MMC snap-in issue.

[chund71]

Hello.

I seem to have an odd issue regarding Group Policy and MMC snap-in
which I cannot get my head around. Any help would be highly
appreciated. I've searched the Google groups and found 2 similar
postings from a couple of years back but they don't have any replies


We're running a small and basic 2003 AD system (1 server) and have XP
pro desktops. As it's a remote location we want to give a person on
site the ability to reset passwords.

I have a simple user policy that restricts users from running MMC's
unless explicitly enabled. This prevents users from running any MMCs
and works great.

I have created a new group policy object and filtered it by a group
which sets the AD users and computers snap-in to enabled.

We then simply created a new MMC and added in the AD Users and
computers snap-in with a filtered view. We saved the MMC and tested it,
but seem to be getting a weird error:

The snap-in below, referenced in this document has been restricted by
policy. Contact your administrator for details.
Folder.

If you click the OK button the MMC loads up fine.

I cannot find any references to "Folder" in the group policy or any
options in the snap-in listed as "Folder".

Please help as I'm stuck and my manager is getting at me as I'm new!

 

[myweb]

Hello (e-mail address removed),

Create a new OU. Move the special user to this OU. Link the policy to this
new OU. Run gpupdate /force and try again.

Best regards

myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.