Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium



Posted on 2010-01-04
Medium Priority
Last Modified: 2012-05-08
I will be grateful if any body resolve my issue
I have active directory server and I want  to apply GPO through Server on all clients so that  nobody(even the person with admin rights on client machine) can change IP ADDRESS Subnet mask and default gateway of  client machine

Please guide me how to do it in step wise manner.Waiting for reply


Question by:pawanopensource
  • 2
LVL 23

Accepted Solution

jakethecatuk earned 500 total points
ID: 26175155
Create a new Group Policy Object and give it a meaningful name.

Edit the GPO and under USER\Administrative Templates\Network\Network Connections, enable 'Prohibit access to properties of a LAN connection'.

Once created, go to the delegation tab and go into advanced security settings and make sure that at least one user is configured 'deny access' to this GPO so that the settings can still be changed by at least one person.

You then need to link the GPO to the OU where all your users are located and that should be it.
LVL 47

Assisted Solution

by:Donald Stewart
Donald Stewart earned 1000 total points
ID: 26176014
You wont be able to do this for users with admin rights. With admin rights there will always be a way to reverse/undo/get around  any restriction.
LVL 49

Assisted Solution

Akhater earned 500 total points
ID: 26176354
There is no need for a GPO for that, normal users won't have the right to do it in all cases. Admins will be able to no matter what you do.

just don't' give admin rights to people you don't trust and that's it
LVL 47

Assisted Solution

by:Donald Stewart
Donald Stewart earned 1000 total points
ID: 26176380
Maybe it will help if we knew the ultimate goal here.

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Here's a look at newsworthy articles and community happenings during the last month.
Sometimes clients can lose connectivity with the Lotus Notes Domino Server, but there's not always an obvious answer as to why it happens.   Read this article to follow one of the first experiences I had with Lotus Notes on a client's machine, my…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Suggested Courses

569 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question