I am trying to disable, but not hide the neighborhood properties. I don't want users to be able to change the TCP/IP settings. I have looked at the default user in the usermanager of domains system policies, but it only lets me hide the icon. I am an a NT envirnment and only need to prevent users from chjanging their IP address from DHCP to a static IP. Is there a way and still be able to see the network neighborhood Icon?
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations derfloh on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
domain security 1
- Thread starter millerdog
- Start date
-
1
- #2
Hmmm, are you working in a Domain or workgroup enviroment?
If Domain, the user should not be able to change the IP. If they are able to change the IP (If I Recall Correctly), then they are logged on either as Administrator, or they have been granted rights in User Manger to change the IP...they probably have admin rights.
***First step is to check User Manager on the server, and see what rights they have. Do they have any rights except standard user? If they have elevated rights, maybe it's time to take those away.
If they are logging on locally, they may have admin rights via the local logon and are changing IP's this way. They could log on locally, change the IP, then log back onto the domain.
***Second step is to ensure they can't logon locally, or at least they can't logon locally with admin rights. I.E., change the local admin password, and check local rights.
Regarding the network neighborhood icon, unless the right to see this icon is removed (either in system policies or via regedit), they will see it, even though the can't change the IP. It may show the IP info, but they won't be able to change the IP.
If you are in a NT$ workgroup situation, all above info is suspect, I only deal with domain situation at work. Sorry...
I don't have a NT4 workstation up at home, so I can't be more specific, sorry. Since we are still using NT$ at work, I have been meaning to install one, but haven't found my round to it, yet. Will check this thread tomorrow, and if still active will add further info based on sitting in front of a NT$ workstation.
Jeff
Always happy to hear followup to a thread, was the situation resolved?, etc..
If Domain, the user should not be able to change the IP. If they are able to change the IP (If I Recall Correctly), then they are logged on either as Administrator, or they have been granted rights in User Manger to change the IP...they probably have admin rights.
***First step is to check User Manager on the server, and see what rights they have. Do they have any rights except standard user? If they have elevated rights, maybe it's time to take those away.
If they are logging on locally, they may have admin rights via the local logon and are changing IP's this way. They could log on locally, change the IP, then log back onto the domain.
***Second step is to ensure they can't logon locally, or at least they can't logon locally with admin rights. I.E., change the local admin password, and check local rights.
Regarding the network neighborhood icon, unless the right to see this icon is removed (either in system policies or via regedit), they will see it, even though the can't change the IP. It may show the IP info, but they won't be able to change the IP.
If you are in a NT$ workgroup situation, all above info is suspect, I only deal with domain situation at work. Sorry...
I don't have a NT4 workstation up at home, so I can't be more specific, sorry. Since we are still using NT$ at work, I have been meaning to install one, but haven't found my round to it, yet. Will check this thread tomorrow, and if still active will add further info based on sitting in front of a NT$ workstation.
Jeff
Always happy to hear followup to a thread, was the situation resolved?, etc..
- Status
Similar threads
- Locked
- Question
- Locked
- Question
- Locked
- Question