AUTOM8LABS - 3ds Max Administrator Tool Permissions
Example registry files v1.0.0

Requires MCP Connector for 3ds Max Pro 1.6.0+ and administrator rights.
Settings apply to every user on each computer. They do not assign user/group
roles, require approval for an action, or restrict manual 3ds Max commands.
Without an active Pro licence these policy values are ignored.

CHOOSE AN EXAMPLE

block-selected-tools.reg sets BlockedTools to:
  delete_objects; cleanup_scene; execute_maxscript
These exact tools are removed and calls are refused, including in batches.
execute_maxscript can perform actions of a blocked tool, so block it too.
Other tools may make similar changes. This is not a comprehensive lock on
all scene changes; use an approved list for tighter control.

allow-approved-tools.reg sets AllowedTools to:
  get_scene_info; list_layers; list_materials
Only these scene tools are allowed. The four session-selection tools remain
available. Essential connection tools are allowed unless explicitly blocked.
New scene tools stay unavailable until added to the list.
An empty AllowedTools value REMOVES the restriction; it does not block all.

Each file sets ONE value. It REPLACES that value, not individual entries.
Include any existing blocked names that must remain blocked before import.
Review the complete approved list before replacing it. BlockedTools wins.
The policy does not grant tools excluded by a licence. 3ds Max does not use
Revit's ForceReadOnly value. These examples do not change audit settings.

SET UP

1. Extract the ZIP and review the chosen .reg file in Notepad.
2. Open Registry Editor as administrator. Export this key if it exists:
   HKEY_LOCAL_MACHINE\SOFTWARE\AUTOM8LABS\MCPConnector3dsMax
   Note whether the value you will change already exists, including its
   previous type and data. If absent, record that before importing.
3. Use File > Import to import the reviewed example. Lists use exact tool
   names separated by semicolons. The supplied files are UTF-16 LE/CRLF.
4. Restart 3ds Max, then fully quit and reopen the AI app. In a new chat,
   ask get_session_info to report the administrator policy and inspect the
   refreshed tool list. Do not test a block with a destructive call. If
   get_session_info is blocked, check MCP Connector Status and the registry.
5. IT can roll out the reviewed values through Group Policy Preferences or
   an Intune PowerShell script. Use administrator or SYSTEM rights, and
   SYSTEM context with the 64-bit PowerShell host for Intune. Test on a
   pilot PC first. A BIM Manager on a restricted PC has those restrictions.

RESTORE PREVIOUS SETTINGS

Close 3ds Max. In Registry Editor as administrator, restore the value's
previous type/data if it existed before. Otherwise delete only the value
added by the example. Keep other values, including AuditLog settings.
Importing an old backup does not remove values added after that backup.
Restart 3ds Max and the AI app afterwards. If IT deploys settings centrally,
update the central configuration too so the policy is not reapplied.

Logging is separate. See Tool Use Audit and Administrator Tool Permissions:
https://autom8labs.io/products/mcp-connector-3dsmax/docs/#power-bi
https://autom8labs.io/products/mcp-connector-3dsmax/docs/#administrator-permissions
