enter display name here enter description here Active Directory Domains and Trusts Active Directory Sites and Services Active Directory Users and Computers Administrative Templates (Computers) Administrative Templates (Users) ADSI Edit AppleTalk Routing Authorization Manager Certification Authority Certification Authority Policy Settings Certificates Certificate Templates Component Services Computer Management Connection Sharing (NAT) DCOM Configuration Extension Device Manager Distributed File System DHCP Relay Management Disk Defragmenter Disk Management Enterprise PKI Event Viewer Event Viewer (Windows Vista) Failover Clusters Manager FAX Service Folder Redirection FrontPage Server Extensions Group Policy Group Policy snap-in extensions Allows you to permit and prohibit the use of the Group Policy Object Editor snap-in and its extensions. Resultant Set of Policy snap-in extensions Group Policy Management Group Policy Object Editor Group Policy tab for Active Directory Tools Permits or prohibits use of the Group Policy tab in property sheets for the Active Directory Users and Computers and Active Directory Sites and Services snap-ins. If you enable this setting, the Group Policy tab is displayed in the property sheet for a site, domain, or organizational unit displayed by the Active Directory Users and Computers and Active Directory Sites and Services snap-ins. If you disable the setting, the Group Policy tab is not displayed in those snap-ins. If this setting is not configured, the setting of the "Restrict users to the explicitly permitted list of snap-ins" setting determines whether this tab is displayed. -- If "Restrict users to the explicitly permitted list of snap-ins" is enabled, users will not have access to the Group Policy tab. To explicitly permit use of the Group Policy tab, enable this setting. If this setting is not configured (or disabled), the Group Policy tab is inaccessible. -- If "Restrict users to the explicitly permitted list of snap-ins" is disabled or not configured, users will have access to the Group Policy tab. To explicitly prohibit use of the Group Policy tab, disable this setting. If this setting is not configured (or enabled), the Group Policy tab is accessible. When the Group Policy tab is inaccessible, it does not appear in the site, domain, or organizational unit property sheets. Health Registration Authority (HRA) Internet Authentication Service (IAS) IAS Logging Internet Explorer Maintenance IGMP Routing Internet Information Services Indexing Service IP Routing IP Security Policy Management IP Security Monitor IPX RIP Routing IPX Routing IPX SAP Routing Local Users and Groups Logical and Mapped Drives NAP Client Configuration Network Policy Server (NPS) .Net Framework Configuration Online Responder OSPF Routing Performance Logs and Alerts Public Key Policies QoS Admission Control RAS Dialin - User Node Remote Access Remote Desktops Removable Storage This policy setting permits or prohibits the use of this snap-in. If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. If this policy setting is not configured, the setting of the "Restrict users to the explicitly permitted list of snap-ins" setting determines whether this snap-in is permitted or prohibited. -- If the policy setting "Restrict users to the explicitly permitted list of snap-ins" is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. -- If the policy setting "Restrict users to the explicitly permitted list of snap-ins" is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear. Resultant Set of Policy snap-in RIP Routing Remote Installation Services Routing Routing and Remote Access Removable Storage Management Security Configuration and Analysis Scripts (Startup/Shutdown) Scripts (Logon/Logoff) Security Settings Security Templates Send Console Message Server Manager Service Dependencies Services Shared Folders Shared Folders Ext SMTP Protocol SNMP Software Installation (Computers) Software Installation (Users) System Information System Properties Telephony Remote Desktop Services Configuration TPM Management Windows Firewall with Advanced Security Wireless Monitor Wireless Network (IEEE 802.11) Policies Wired Network (IEEE 802.3) Policies WMI Control