Grant a User ability to change their IP address?

[GeneralDzur]

Hi all.

We have a user who uses a laptop to work in remote locations, but we don't want to allow them admin access for obvious reasons. They need to change their IP address, but the problem is we use static IP's here, while on the road they usually need DHCP.

We have a batch file (previously mentioned) to allow rapid changing of IP's via the command-prompt, but it requires administrator privs. Is there a way to grant regular users the ability to change their IP?

- stephan

 

[bcastner]

Windows XP includes a group called the Network Configuration Operators group. Users in this group have some administrative privilege to manage the configuration of networking features. Once you add a user to this group, they will have the ability to perform the following network related tasks:

. Modify TCP/IP properties for a local area connection.
. Rename LAN connections or remote access connections . available to all users
. Enable or disable a LAN connection
. Modify the properties of remote access connections of the user
. Delete all of the remote access connections of the user
. Rename all remote access connections of the user
. Use ipconfig, release, or renew commands

In following with the principle of least privilege, if you want to allow a user to perform network related administrative tasks, you can add them to the network Configuration Operators group, instead of say, adding them to the Administrators group. Doing the latter will give users far more administrative rights than they require.

You can add a user to this built-in group by following the 9 steps that are described below:

Click Start and click Control Panel.
Double click Administrative Tools.
Double click Computer Management.
Expand Local Users and Groups.
Click the Groups container.
In the details pane, double click Network Configuration Operators.
Click the Add button.
Enter in the appropriate user name and click Check Names. Click OK.
Click OK to close the Network Configuration Operators Properties dialog box.

 

[GeneralDzur]

B,

Thanks a million. Yet again your knowledge saves a poor, anonymous network admin.

I Googled it (wait, can't say that...Google's suing for using Google as a verb)...I mean I "searched for it on Google" and couldn't find anything.

- stephan

 

[bcastner]

You are very welcome.

Best wishes,
Bill Castner