Title: RE: Win2000 IP Change by Non-Administrators
either give them local admin access to their workstation or you can set up a local policy using the MMC.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
Sent: 12 September 2001 15:23
To: NT System Admin Issues
, NC
27604 Voice:
919-716-6209
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent:
Wednesday, September 12, 2001 10:31 AMTo: NT System Admin
IssuesSubject: RE: Win2000 IP Change by
Non-Administrators
either give them local admin access
I can't remember if being a member of the Power Users group allows them to
change this. Maybe something to try.
Ben Winzenz, MCSE
Network/Systems Administrator
Peregrine Systems, Inc.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September
Title: RE: Win2000 IP Change by Non-Administrators
it has nothing to do with domain rights. It's the local rights in the local admin group on the OS you need to change.
-Original Message-
From: Benjamin Winzenz [mailto:[EMAIL PROTECTED]]
Sent: 12 September 2001 15:41
To: NT System
Nice to know we are still willing to assist those that send out 12-line
disclaimers on their mail!
Anyway, the local vs domain is probably not the issue here. Making Joe
User a local admin should keep the domain recourses safe. However, he is
still free to cause serious damage to the local
Title: RE: Win2000 IP Change by Non-Administrators
well if you don't trust your users, and in most cases you shouldn't ;) You can set-up a group policy for that user on the local machine. Might take a bit of configuration though, hence I would go with the quick and dirty local rights
The first thing you might try is the registry keys that contain the IP
information. Try granting various ACLs to those, maybe start with FC and see
if it works, then tighten it until it does the absolute minimum required.
Thanks
We use hardware profiles for this.Many users have home networks, plug
into client networks, etc.We create a profile for each case and make
the default at the place where they are the most. Some of the users
still call for support every time they have to use it but it's still the
best
