[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

Restrict users to the explicitly permitted list of snap-ins

ID: oval:org.secpod.oval:def:28557Date: (C)2015-10-08   (M)2022-10-10
Class: COMPLIANCEFamily: windows




Lets you selectively permit or prohibit the use of Microsoft Management Console (MMC) snap-ins. -- If you enable this setting, all snap-ins are prohibited, except those that you explicitly permit. Use this setting if you plan to prohibit use of most snap-ins. To explicitly permit a snap-in, open the Restricted/Permitted snap-ins setting folder and enable the settings representing the snap-in you want to permit. If a snap-in setting in the folder is disabled or not configured, the snap-in is prohibited. -- If you disable this setting or do not configure it, all snap-ins are permitted, except those that you explicitly prohibit. Use this setting if you plan to permit use of most snap-ins. To explicitly prohibit a snap-in, open the Restricted/Permitted snap-ins setting folder and then disable the settings representing the snap-ins you want to prohibit. If a snap-in setting in the folder is enabled or not configured, the snap-in is permitted. When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear. Note: If you enable this setting, and you do not enable any settings in the Restricted/Permitted snap-ins folder, users cannot use any MMC snap-ins. Fix: (1) GPO: User Configuration\Administrative Templates\Windows Components\Microsoft Management Console!Restrict users to the explicitly permitted list of snap-ins (2) REG: HKEY_USERS\Software\Policies\Microsoft\MMC!RestrictToPermittedSnapins

Platform:
Microsoft Windows Server 2012 R2
Reference:
CCE-38320-8
CPE    1
cpe:/o:microsoft:windows_server_2012::r2:x64
CCE    1
CCE-38320-8

© SecPod Technologies