How to enable users to change IP addresses?

[ojosh]

Hi All,

I have Windows 2003 Domain Controller on my LAN. I need to give a group of users ability to change their IP address while still maintaining their users priviledge.

I will appreciate every contribution to this.

Thanks.

Leke

 

[ojosh]

Hi All,

Please can somebody help me on this problem.

Leke

 

[58sniper]

I take it your not using DHCP? If not, why not?

And why would users need to change their addresses?

Pat Richard, MCSE(2) MCSA:Messaging, CNA(2)
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[ojosh]

Thanks for the response,

I have a group of users that needs to change IP address from Private to Public IP and vice versa to enable them perform some certain tasks and I dont want these users to have administrative priviledge.

What can I do to enable these uses to have admin access to their LAN card so they can alter IP address with their user proviledge.

Thanks

 

[pgaliardo]

Could you add a second NIC and configure each with the appropriate address? Then all the user needs to do is physically plug his network cable into the correct NIC. I'm not totally clear on what you need to do, so I'm not sure if this is a viable option.

 

[itaviator]

As far as I know, you need admin rights to change the ip. pgaliardo's suggestion sounds the better.

Systems Administrator

 

[ojosh]

Thanks to you all contributors,

I have finally got a solution to the problem.

Now to enable domain Users ability to change IP Address, follow the steps bellow.

1. Logon to the PC as a local administrator, Right click on MY Computer navigate to Manage/Local users and Group/Group.

2. Add the domain user to the local Administrator Group by selecting the Domain Controller.

Log off and logon as the user you added on step 3.

Thanks.

 

[ncotton]

but they now have full contorl of their system, and can change anything, They aren't domain admins, but can do anything they want for their system, including remove the machine from the domain.

Hope this Helps.

Neil J Cotton
njc Information Systems
Systems Consultant

 

[skialta]

You just did exactly what you didn't want to do in the 4th reply.

 

[trojanman]

ojosh, undo what you did immediately.

If you are familiar with Group Policy, you can disable the "Prohibit TCP/IP advanced configuration" policy for that group. By disabling it, you alow them the ability to change their IP.

 

[58sniper]

And your solutions goes against your original request that they not have admin rights. They do now. They can lock out the domain admins from that machine, and do anything they want.

But, since you're allowing them to change their machine to a public IP address, I suspect security is not a concern at all at your company.

Pat Richard, MCSE MCSA:Messaging CNA
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt