Local Group Policy on Windows 2008 Server

Hello ,

I have servers with windows 2008 r2 that they are in workgroup . I want somehow to prevent user that own this Virtual Server to change network settings ( tcp/ip)  .

The user is a local admin to this server. If in local group policy prevent the tcp settings will it work ?

Thanks
Anestis PsomasSystem and Network AdministratorAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Nick RhodeIT DirectorCommented:
Yes but will apply to all and if you wanted to make a change you would have to remove that policy in order to do so.
0
Mike KlineCommented:
Yes it will work because local GPOs apply just like any other.  If the user is smart enough and knows what he is doing he can reverse it with his admin rights.

Thanks

Mike
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Anestis PsomasSystem and Network AdministratorAuthor Commented:
Thanks for your replies. I have test it right now but the local admin user can change the tcp settings.

It seems that settings in gpedit.msc does not work for local admins.

I create another user and i put him in power users and it seems that it is blocked in this user.

Any ideas?
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Mike KlineCommented:
Can you run an RSoP report for that admin account.  What does that tell you?

Thanks

Mike
0
Anestis PsomasSystem and Network AdministratorAuthor Commented:
I see that the " Prohibit TCP/IP Advance configuration " is enabled also the " Prohibit access to properties of a lan connection " is enabled.

But when i logon with the local admin it doesn't work . With power user it works.
0
Mike KlineCommented:
Does the admin have read and apply to that group policy in the ACL?

Thanks

Mike
0
Anestis PsomasSystem and Network AdministratorAuthor Commented:
How can i see this mike ?

Thanks
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.