What permissions do I need to change an IP address on a DC?

your DC shouls always be static, but yes you have to be a domain admin to change it due to the security issue.

And once given an IP, you should let it stay has is. The change of IP can have a lot of issues !

Best Regards !

Actually we are changing the subnet mask not the IP address...but they require the same rights. Adding the user to the BUILTIN\Administrators group give them slightly less access than them being a member of the Domain Administrors group ie they cant modify the default domain GPO etc. But they can create a domain admin account which allows them to do it so its only really going to stop them from making some acciental mistakes. I think we'll go with this solution.

If you are changing the Subnet, be sure that every PC is put on the same Subnet !!!

Best Regards !

The PC's are using DHCP...FYI we are installing VLANS and our onsite low skilled people are installing the switchs and they need to be able to do the reconfiguring of the servers, PCs etc which is why they need access to DCs.

If the changes are being made "Switch Level" why in this world does the server has to change IP ??

Wouldn't it be a lot easier to simple match the Switch with the Server ? ( Unless, of course, you are beginning from scratch ! )

Best Regards !

As stated above we are actually changing the subnet mask not the IP. This is because we are installing VLANS hence the new subnet mask, hence the need to change for engineers to login and change the subnet mask on the DCs