Restricting access to XrmToolBox and plugins

XrmToolBox includes two features that allow you to control the use of the program:

  • You can control if XrmToolBox can be executed
  • You can control what tools are allowed to be used 

Restrict XrmToolBox usage

To restrict usage of XrmToolBox, you can create a registry key to block execution of the program. The key is the following:

[HKEY_CURRENT_USER\Software\MscrmTools\XrmToolBox]
"IsDisabled"=dword:00000001

or

[HKEY_LOCAL_MACHINE\Software\MscrmTools\XrmToolBox]
"IsDisabled"=dword:00000001

If the key IsDisabled equals 1, then the user won't be able to execute XrmToolBox.

Restrict allowed tools in XrmToolBox

To restrict usage to specific toolsonly, create a new registry key (REG_MULTI_SZ) that contains the technical name of the tools to allow (one tool per line). In the example below, from a registry key export, the content is encoded

[HKEY_CURRENT_USER\Software\MscrmTools\XrmToolBox]
"AllowedPlugins"=hex(7):2a,00,00,00,4d,00,73,00,63,00,72,00,6d,00,54,00,6f,00,\
  6f,00,6c,00,73,00,2e,00,49,00,63,00,6f,00,6e,00,61,00,74,00,6f,00,72,00,00,\
  00,4d,00,73,00,63,00,72,00,6d,00,54,00,6f,00,6f,00,6c,00,73,00,2e,00,57,00,\
  65,00,62,00,52,00,65,00,73,00,6f,00,75,00,72,00,63,00,65,00,73,00,4d,00,61,\
  00,6e,00,61,00,67,00,65,00,72,00,00,00,00,00

Here is the visual representation

In this example, all tools are allowed because of the star character. If the star character wasn't there, only Iconator and WebResourcesManager would be available in XrmToolBox, even if other tools are installed.

Registry evaluation order

Current user registry key is evaluated before Local machine one.