Using Microsoft Management Console

Microsoft Management Console (MMC) is an application that hosts tools for administering computers, networks, and other system components. By itself, MMC performs no administrative services. Rather, it acts as the host for one or more modules, called snap-ins, which do the useful work. MMC provides user-interface consistency so that you or the users you support see more or less the same style of application each time you need to carry out some kind of computer management task. A combination of one or more snap-ins can be saved in a file called a Microsoft Common Console Document or, more commonly, an MMC console.

Creating snap-ins requires expertise in programming. You don't have to be a programmer, however, to make your own custom MMC consoles. All you need to do is run MMC, start with a blank console, and add one or more of the snap-ins available on your system. Alternatively, you can customize some of the MMC consoles supplied by Microsoft or other vendors simply by adding or removing snap-ins. You might, for example, want to combine the Services console with the Event Viewer console, the latter filtered to show only events generated by services. You might also want to include a link to a website that offers details about services and service-related errors. Or perhaps you would like to simplify some of the existing consoles by removing snap-ins you seldom use.

MMC consoles use, by default, the file name extension .msc, and .msc files are associated by default with MMC. Thus, you can run any MMC console by double-clicking its file name in a File Explorer window or by entering the file name at a command prompt. Windows 10 includes several predefined consoles; the most commonly used ones, can be easily found by typing their name in the search box.

Avoiding User Account Control problems with MMC consoles
Consoles can be used to manage all sorts of computer hardware and Windows features: With a console, you can modify hard-drive partitions, start and stop services, and install device drivers, for example. In other words, MMC consoles perform the types of tasks that User Account Control (UAC) is designed to restrict. In the hands of someone malicious (or simply careless), consoles have the power to wreak havoc on your computer.

Therefore, when using an MMC console, you're likely to encounter a User Account Control request for permission to continue. If UAC is enabled on your computer, the type of request you get and the restrictions that are imposed depend on your account type and the console you're using. Some consoles, such as Device Manager (Devmgmt.msc), display a message box informing you that the console will run with limitations. (In effect, it works in a read-only mode that allows you to view device information but not make changes.) Others block all use by standard user accounts. To ensure that you don't run into an "access denied" roadblock when performing administrative tasks while signed in with a standard account, always right-click and then click Run As Administrator.

Useful predefined consoles

Console name 	Description
(file name)

Certificate 	Uses the Certificates snap-in to view and manage 
Manager 	security certificates for the current user. 
(Certmgr.msc)	A similar console, Certlm.msc, manages 
		certificates on the local machine.


Computer 	Includes the functionality of the Task Scheduler,
Management 	Event Viewer, Shared Folders, Local Users And Groups,
(Compmgmt.msc)	Performance Monitor, Device Manager, Disk Management, 
		Services, and WMI Control snap-ins, providing control 
		over a wide range of computer tasks.

Device Manager 	Uses the Device Manager snap-in to enable administration
(Devmgmt.msc)	of all attached hardware devices and their drivers. 

Disk 		Uses the Disk Management snap-in for configuring disk 
Management 	volumes and partitions.
(Diskmgmt.msc)

Event Viewer	Uses the Event Viewer snap-in to display all types 
(Eventvwr.msc)	of logged information.

Hyper-V 	Uses the Hyper-V Manager snap-in to provide an environment
Manager 	for creating, modifying, and running virtual machines. 
(Virtmgmt.msc)

Local Users	Uses the Local Users and Groups snap-in to manage local 
and Groups 	user accounts and security groups.
(Lusrmgr.msc)

Performance	Uses the Performance Monitor snap-in to provide a set of
Monitor		monitoring tools. 
(Perfmon.msc)

Print		Uses the Print Management snap-in for managing printers
Management 	and print jobs.
(Printmanagement.msc)

Services 	Uses the Services snap-in to manage services in Windows.
(Services.msc)

Task Scheduler	Uses the Task Scheduler snap-in for managing tasks
(Taskschd.msc)	that run automatically.

Trusted 	Displays information about and enables configuration 
Platform 	of a computer's TPM chip.
Module (TPM) 
Management 
(Tpm.msc)

Windows 	Uses the Windows Firewall With Advanced Security snap-in
Firewall With 	to configure rules and make other firewall settings.
Advanced 
Security (Wf.msc)