Solved

DIsallowing access of user to change network settings in xp computer

Posted on 2011-09-28
7
291 Views
Last Modified: 2012-05-12
I have a user who is constatly changing his network numbers to avoid a spam filter.
I need to find a way through his sign on to active directory to forbid access.
Thanks
0
Comment
Question by:kcassone
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 36718331
Does he have admin rights on his machine, there is the "prohibit access to properties for a LAN connection" policy

http://technet.microsoft.com/en-us/library/cc975891.aspx

Thanks

Mike
0
 

Author Comment

by:kcassone
ID: 36719656
He has admin properties because it says cannot log on interactively and sign on network  if I change privileges.  Is this policy you talking about on XP computer or Server?
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 36719904
It is a user policy so it will apply to his user account.

Thanks


Mike
0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 

Author Comment

by:kcassone
ID: 36720140
As stated above I want to disallow via active directory policy.  any ideas?
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 36720152
Yes did you see the link I posted

User Configuration\Administrative Templates\Network\Network and Dial-up Connections
0
 

Author Comment

by:kcassone
ID: 36720294
I misunderstood you when you said it was a user property I thought you were saying it's specific to user account on XP but you are actually saying on the Windows 2003 server.
I will take a look
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 36720547
Yes create the GPO and have it apply to the user, you can use security filtering if you only want it to apply to one user.

http://adisfun.blogspot.com/2009/04/security-filtering-and-group-policy.html

Thanks

Mike
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question