Link to home
Start Free TrialLog in
Avatar of scottyk67
scottyk67

asked on

Disable network properties

Here is what i want to do.  I want to prevent a user from changing their DNS settings in XP Pro.  I thought this would be easy to do this with group policy.  I'm not seeing it anywhere though.  I don't want the user to be able to surf from this box.  Any other suggestions for what i'm trying to do would be appreciated.
ASKER CERTIFIED SOLUTION
Avatar of b0lsc0tt
b0lsc0tt
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of jkelley53
jkelley53


If you want to set this using Group Policy, the policy that you want to set is in

User  Configuration --> Administrative Templates --> Network --> Network and Dial-up Connections

Set "Prohibit access to properties of a LAN connection" to enable.
jkelley53,,, that path you posted looks very familiar for some reason???
very snarky, mike.
ok here,
user config>administrative templates>network>network connections>"prohibit access to properties of LAN connection"
>Mike does it look familiar too :)

it was a joke,,, simply pointing out that we both had the same solution.  Relax.
Well Mike,

If you read my post again that I posted after yours, you will also find some humor, after all we also need some fun out of regular routine...

Keep Smiling,

Engineer_Dell
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of scottyk67

ASKER

here's what i did.  I created an OU and applied a group policy to it.  I put the computer and my user account in the OU.  It seems the computer configs apply but the user configs don't.  In the computer configs i removed the connections tab in IE and that worked.  I can still get to properties of the network interface.  thanks!
Check the group membership of your account.  If it's only in Domain Admins and no other group, then that's why.  You must leave your account in Domain User to be able to apply it.

Check it with a normal test account that is simply a Domain User.

IN XP, give the user "limited user" rights ONLY, nothing else, and disable internet access as a limited user, that will do it.  You add them to the limited user group, and you fix the features of limited users to where they cannot get on the internet, it is all in user manager.
Windows XP Service Pack 2 (SP2) contains Group Policy settings that were not available in Windows XP Service Pack 1 (SP1) or in the original release of Windows XP. Some of these settings can be found in Group Policy under a new key called Internet Communication Management. This new key is located within GPMC in Computer Configuration\Administrative Templates\System and in User Configuration\Administrative Templates\System. This appendix describes the settings under the Internet Communication Management key, and the way in which one setting, Restrict Internet communication, controls multiple other settings.

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/intmgmt/30_xpicm.mspx

Hope this helps,

Engineer_Dell