Administrative Templates (Users): registry value Restrict_Run ({0F6B957E-509E-11D1-A7CC-0000F87571E3})UserHKCU\Software\Policies\Microsoft\MMC\{0F6B957E-509E-11D1-A7CC-0000F87571E3}

Policy ID: MMC_ADMUsers_1
Scope: User Configuration
Supported on: At least Windows 2000
Source: Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category: Windows Components › Microsoft Management Console › Restricted/Permitted snap-ins › Group Policy › Group Policy snap-in extensions

Registry

Restrict_Run

REG_DWORDUser

HKCU\Software\Policies\Microsoft\MMC\{0F6B957E-509E-11D1-A7CC-0000F87571E3} Current key

Enabled value: 0
Disabled value: 1

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Policies\Microsoft\MMC\{0F6B957E-509E-11D1-A7CC-0000F87571E3}]

; Options (use only one)
; Enabled
"Restrict_Run"=dword:00000000
; Disabled
"Restrict_Run"=dword:00000001

CMD

:: Options (use only one)

:: Enabled
reg add "HKCU\Software\Policies\Microsoft\MMC\{0F6B957E-509E-11D1-A7CC-0000F87571E3}" /v "Restrict_Run" /t REG_DWORD /d 0 /f
:: Disabled
reg add "HKCU\Software\Policies\Microsoft\MMC\{0F6B957E-509E-11D1-A7CC-0000F87571E3}" /v "Restrict_Run" /t REG_DWORD /d 1 /f

PowerShell

# Common: create the key
New-Item -Path 'HKCU:\Software\Policies\Microsoft\MMC\{0F6B957E-509E-11D1-A7CC-0000F87571E3}' -Force | Out-Null

# Options (use only one)
# Enabled
New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\MMC\{0F6B957E-509E-11D1-A7CC-0000F87571E3}' -Name 'Restrict_Run' -PropertyType DWord -Value 0 -Force | Out-Null
# Disabled
New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\MMC\{0F6B957E-509E-11D1-A7CC-0000F87571E3}' -Name 'Restrict_Run' -PropertyType DWord -Value 1 -Force | Out-Null

Restrict_Run

REG_DWORDUser

HKCU\Software\Policies\Microsoft\MMC\{D02B1F73-3407-48ae-BA88-E8213C6761F1}

Enabled value: 0
Disabled value: 1

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Policies\Microsoft\MMC\{D02B1F73-3407-48ae-BA88-E8213C6761F1}]

; Options (use only one)
; Enabled
"Restrict_Run"=dword:00000000
; Disabled
"Restrict_Run"=dword:00000001

CMD

:: Options (use only one)

:: Enabled
reg add "HKCU\Software\Policies\Microsoft\MMC\{D02B1F73-3407-48ae-BA88-E8213C6761F1}" /v "Restrict_Run" /t REG_DWORD /d 0 /f
:: Disabled
reg add "HKCU\Software\Policies\Microsoft\MMC\{D02B1F73-3407-48ae-BA88-E8213C6761F1}" /v "Restrict_Run" /t REG_DWORD /d 1 /f

PowerShell

# Common: create the key
New-Item -Path 'HKCU:\Software\Policies\Microsoft\MMC\{D02B1F73-3407-48ae-BA88-E8213C6761F1}' -Force | Out-Null

# Options (use only one)
# Enabled
New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\MMC\{D02B1F73-3407-48ae-BA88-E8213C6761F1}' -Name 'Restrict_Run' -PropertyType DWord -Value 0 -Force | Out-Null
# Disabled
New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\MMC\{D02B1F73-3407-48ae-BA88-E8213C6761F1}' -Name 'Restrict_Run' -PropertyType DWord -Value 1 -Force | Out-Null

Restrict_Run

REG_DWORDUser

HKCU\Software\Policies\Microsoft\MMC\{84DE202E-5D95-4764-9014-A46F994CE856}

Enabled value: 0
Disabled value: 1

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Policies\Microsoft\MMC\{84DE202E-5D95-4764-9014-A46F994CE856}]

; Options (use only one)
; Enabled
"Restrict_Run"=dword:00000000
; Disabled
"Restrict_Run"=dword:00000001

CMD

:: Options (use only one)

:: Enabled
reg add "HKCU\Software\Policies\Microsoft\MMC\{84DE202E-5D95-4764-9014-A46F994CE856}" /v "Restrict_Run" /t REG_DWORD /d 0 /f
:: Disabled
reg add "HKCU\Software\Policies\Microsoft\MMC\{84DE202E-5D95-4764-9014-A46F994CE856}" /v "Restrict_Run" /t REG_DWORD /d 1 /f

PowerShell

# Common: create the key
New-Item -Path 'HKCU:\Software\Policies\Microsoft\MMC\{84DE202E-5D95-4764-9014-A46F994CE856}' -Force | Out-Null

# Options (use only one)
# Enabled
New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\MMC\{84DE202E-5D95-4764-9014-A46F994CE856}' -Name 'Restrict_Run' -PropertyType DWord -Value 0 -Force | Out-Null
# Disabled
New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\MMC\{84DE202E-5D95-4764-9014-A46F994CE856}' -Name 'Restrict_Run' -PropertyType DWord -Value 1 -Force | Out-Null