Restricting access to XrmToolBox and plugins
XrmToolBox includes two features that allow you to control the use of the program:
- You can control if XrmToolBox can be executed
- You can control what plugins are allowed to be used
Restrict XrmToolBox usage
To restrict usage of XrmToolBox, you can create a registry key to block execution of the program. The key is the following:
[HKEY_CURRENT_USER\Software\MscrmTools\XrmToolBox] "IsDisabled"=dword:00000001
or
[HKEY_LOCAL_MACHINE\Software\MscrmTools\XrmToolBox]
"IsDisabled"=dword:00000001
If the key IsDisabled
equals 1, then the user won't be able to execute XrmToolBox.
Restrict allowed plugins in XrmToolBox
To restrict usage to specific plugins only, create a new registry key (REG_MULTI_SZ) that contains the technical name of the plugins to allow (one plugin per line). In the example below, from a registry key export, the content is encoded
[HKEY_CURRENT_USER\Software\MscrmTools\XrmToolBox] "AllowedPlugins"=hex(7):2a,00,00,00,4d,00,73,00,63,00,72,00,6d,00,54,00,6f,00,\ 6f,00,6c,00,73,00,2e,00,49,00,63,00,6f,00,6e,00,61,00,74,00,6f,00,72,00,00,\ 00,4d,00,73,00,63,00,72,00,6d,00,54,00,6f,00,6f,00,6c,00,73,00,2e,00,57,00,\ 65,00,62,00,52,00,65,00,73,00,6f,00,75,00,72,00,63,00,65,00,73,00,4d,00,61,\ 00,6e,00,61,00,67,00,65,00,72,00,00,00,00,00
Here is the visual representation
In this example, all plugins are allowed because of the star character. If the star character wasn't there, only Iconator and WebResourcesManager would be available in XrmToolBox, even if other plugins are installed.
Registry evaluation order
Current user registry key is evaluated before Local machine one.