Suite of PowerShell commands to enable all MMC Snapins on Windows (requires admin UAC)

enableSnapins.ps1

#Requires -RunAsAdministrator
Get-ChildItem -Path 'HKCU:\SOFTWARE\Policies\Microsoft\MMC\' | ForEach-Object { Set-ItemProperty -Path $_.PSPath -Name Restrict_Run -Value 1  # Disable is 1 (1 means allow the MMC) 
}
Set-ItemProperty -Path HKCU:\Software\Policies\Microsoft\MMC\ -Name RestrictAuthorMode -Value 0
Set-ItemProperty -Path HKCU:\Software\Policies\Microsoft\MMC\ -Name RestrictToPermittedSnapins -Value 0
if(Test-Path -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun){
  Remove-Item -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun  
}
Set-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Policies\System -Name DisableRegistryTools -Value 0 -Force
Set-ItemProperty -Path HKLM:\Software\Policies\Microsoft\Windows\System\ -Name AllowDomainPINLogon -Value 1 -Type DWord
if(-not (Test-Path -Path HKLM:\Software\Policies\Microsoft\PassportForWork)){
  New-Item -Path HKLM:\Software\Policies\Microsoft\ -Name PassportForWork
}
Set-ItemProperty -Path HKLM:\Software\Policies\Microsoft\PassportForWork -Name Enabled -Value 1 -Type DWord
Set-ItemProperty -Path HKLM:\Software\Policies\Microsoft\PassportForWork -Name DisablePostLogonProvisioning -Value 1 -Type DWord