hey all, i have some big problem in my network.
i have 3 site named by city.
tel aviv-server 2012
beer sheva-server 2008r2
netanya-server 2008 r2
i crete gpo(computer management) that deny access to mmc.exe
computer management--->windows settings--->securtiy--->file system
and add---> %systemroot%/system32/mmc.exe and deny access to user.
now i go to check the gpo in client side with gpresult /scope computer /r and see that some computers in tel aviv site connected to netanya/beer sheva site.
what can i do ?
i have a situation that not matter what i do i cant release mmc.exe to users.