You may have quite a task checking all of your GPO's, so I would start from
the OU level of the user and work your way up. Check all of the 'User
Configuration's under Administrative Templates/Windows Components/Microsoft
Management Console. There is a policy called 'Restrict users to the
explicitly permitted list of snap-ins'. If it is Enabled, users will only
be able to install snap-ins specified under 'Restricted/Permitted snap-ins'.
SQL won't appear there because it's not a default one. I haven't been able
to figure out how to add in options.... So I would suggest setting the
'explicitly permitted' policy to Not configured and then disable anything
you don't want users to access.
Mindy Tabin
-----Original Message-----
From: Hutchings, Darren (3159) [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 25, 2001 12:10 PM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] Group Policy and MMC
Hi there.
I'm having a bit of a problem with Group Policy and the MMC. Someone in our
org. changed a permission within Active Directory that restricts access to
the SQL Administrator snap-in for MMC (or possibly access to the MMC
itself). He's not sure exactly what he changed, and cannot seem to track
down the change he made that restricts this.
Does anyone have any clue where to look? I've scoured the domain default
GPO's, all of the GPOs in each of our OU's with absolutely no luck. There
must be something that I'm missing. When one of the users who previously
had access to administer her SQL server attempts to do so, she gets an error
indicating that access has been restricted by group policy.
Thank you very much in advance,
Darren Hutchings
List info: http://www.activedir.org/mail_list.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info: http://www.activedir.org/mail_list.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
