Posted on 2010-01-04
Last Modified: 2012-05-08
I will be grateful if any body resolve my issue
I have active directory server and I want  to apply GPO through Server on all clients so that  nobody(even the person with admin rights on client machine) can change IP ADDRESS Subnet mask and default gateway of  client machine

Please guide me how to do it in step wise manner.Waiting for reply


Question by:pawanopensource
    LVL 23

    Accepted Solution

    Create a new Group Policy Object and give it a meaningful name.

    Edit the GPO and under USER\Administrative Templates\Network\Network Connections, enable 'Prohibit access to properties of a LAN connection'.

    Once created, go to the delegation tab and go into advanced security settings and make sure that at least one user is configured 'deny access' to this GPO so that the settings can still be changed by at least one person.

    You then need to link the GPO to the OU where all your users are located and that should be it.
    LVL 47

    Assisted Solution

    You wont be able to do this for users with admin rights. With admin rights there will always be a way to reverse/undo/get around  any restriction.
    LVL 49

    Assisted Solution

    There is no need for a GPO for that, normal users won't have the right to do it in all cases. Admins will be able to no matter what you do.

    just don't' give admin rights to people you don't trust and that's it
    LVL 47

    Assisted Solution

    Maybe it will help if we knew the ultimate goal here.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Maximize Your Threat Intelligence Reporting

    Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

    Preface There are many applications where some computing systems need have their system clocks running synchronized within a small margin and eventually need to be in sync with the global time. There are different solutions for this, i.e. the W3…
    Network ports are the threads that hold network communication together. They are an essential part of networking that can be easily ignore or misunderstood, my goals is to show those who don't have a strong network foundation how network ports opera…
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    761 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    9 Experts available now in Live!

    Get 1:1 Help Now