
You may enable the Restrict users to the explicitly permitted list of snap-ins policy setting if you want to disable most MMC snap-ins. If you enable the Restrict users to the explicitly permitted list of snap-ins policy setting, all MMC snap-ins are prohibited, except MMC snap-ins that you explicitly enable. Important If you enable the Restrict users to the explicitly permitted list of snap-ins policy setting but do not enable any settings in the "Restricted/Permitted snap-ins" folder, you cannot use any MMC snap-ins. However, before you enable this setting, you must enable the settings in the "Restricted/Permitted snap-ins" folder for MMC snap-ins that you want to use. The Restrict users to the explicitly permitted list of snap-ins Group Policy setting lets you selectively enable or disable specific Microsoft Management Console (MMC) snap-ins.
