Link to home
Start Free TrialLog in
Avatar of bobox00
bobox00Flag for United States of America

asked on

How do I prevent local admin from changing IP address

Windows 7 computer on my Windows 2008 domain. Need to make sure that the static IP remains, so that I can filter out certain websites, for that computer, on my firewall.
Avatar of BillBondo
BillBondo
Flag of United States of America image

disable the account. It should be already
Avatar of bobox00

ASKER

the user needs to be a local admin for one of his work related programs
Avatar of bigbigpig
bigbigpig

GPO - User Configuration>Policies>Administrative Templates>Network>Network Connections.  Prohibit access to properties of a LAN connection.

Remember that this is a user configuration, so if you only want to lock it down on a certain OU that contains computers then linking it to that OU won't do anything.  You have to link it to the OU that contains the users.
ASKER CERTIFIED SOLUTION
Avatar of ChiefIT
ChiefIT
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of bobox00

ASKER

That sounds just right. Log in as loca admin, give user full rights to the application folder he needs, log in as user and test software functionality. Thanks.