Restricting users from changing network settings in Win XP

[858diver]

Successfully upgraded a home network to the D-Link DI-614+ router, which provides the ability to restrict Internet access by IP address, and manually assigned IP addresses to the affected computers.

Question: How do I prevent users from changing their IP address, to circumvent this?

 

[Fuzznuts]

make them a member of the users group only power users and above have the right to change the settings unless of course you have specified otherwise via a GPO. If you wish to keep them in the power users so they can install and unistall programs then goto start run type gpedit.msc then goto group policy/user admistration/templates/network and dig around in there BE CAREFUL NOT TO LOCK YOUSELF OUT. most if it is common sense and the policy are explained but BE CAREFUL IF YOU FECK IT UP ITS NOTHING TO DO WITH ME

this will of course only work on XP pro home has no group policy settings and you cant restirct the users in this way

 

[NogginBoink]

Don't give your users admin access.

An administrator can own the machine, and there's nothing you can do to prevent it.

You can try to slow them down by changing permissions on the control panel applet in winnt\system32 (ncpa.cpl), but admins will always be able to give themselves permissions again.

 

[858diver]

Thanks.

Unfortunately, this machine has win xp home.

By changing account to a limited user, the issue of preventing network setup access has been addressed.

HOWEVER: This also prevents the user from saving files to most folders - even when the administrator attempts to remove read-only control. Mcafee VirusScan is also unable to save info (webemail.txt) when Outlook is closed.

Suggestions?

 

[Fuzznuts]

nothing you can do im afraid thats why pro and home are out there that level of control is simply not available. if it cant be done with NTFS you may try changing the permisson on the registry keys relating to those programs. major dmg can be done though if you get that wrong. give it a go but its up to you.