If this value is set before or after the PowerShell script will ignore the -value 1. The functions will disable or enable the MMC, but the menu system will ask you what do you want to do.Īs you stated you know how to do this with GPO, but GPO actually uses a different DWORD called Restrict_Run.
In basic it changes the Registry Key for MMC from 0 to 1. It's only available in the Pro and Enterprise editions instead. I have added a small TUI (Text User Interface) option. Check your Windows version If you have the Windows 10 Home edition, then it will not have Local Users and Groups (lusrmgr.msc) included in it. Note doing this by Group Policy will overwrite what you setup manualy.
