Restrict the user from entering author mode
|ID: oval:org.secpod.oval:def:28368||Date: (C)2015-10-08 (M)2017-10-31|
|Class: COMPLIANCE||Family: windows|
Prevents users from entering author mode.
This setting prevents users from opening the Microsoft Management Console (MMC) in author mode, explicitly opening console files in author mode, and opening any console files that open in author mode by default.
As a result, users cannot create console files or add or remove snap-ins. Also, because they cannot open author-mode console files, they cannot use the tools that the files contain.
This setting permits users to open MMC user-mode console files, such as those on the Administrative Tools menu in Windows 2000 Server family or Windows Server 2003 family. However, users cannot open a blank MMC console window on the Start menu. (To open the MMC, click Start, click Run, and type mmc.) Users also cannot open a blank MMC console window from a command prompt.
If you disable this setting or do not configure it, users can enter author mode and open author-mode console files.
(1) GPO: User Configuration\Administrative Templates\Windows Components\Microsoft Management Console!Restrict the user from entering author mode
(2) REG: HKEY_USERS\Software\Policies\Microsoft\MMC!RestrictAuthorMode
|Microsoft Windows Server 2012 R2|