Hi,
Current: Domain user can launch MMC console on their computer, select remote server A, select and use MMC snap-ins to work on the remote server A.
Goal: I want to block MMC on the remote server A so that if a domain user launch MMC console on their computer, select remote server A and then select MMC snap-ins, domain users will be notified that restriction is in place or access is denied.
Domain administrator should be able to launch MMC console from remote server B, select remote server A, select and use MMC snap-ins to work on the remote server A.
Domain user should be able to use MMC snap-ins on their own computer. 
