Link to home
Start Free TrialLog in
Avatar of Anestis Psomas
Anestis Psomas

asked on

Local Group Policy on Windows 2008 Server

Hello ,

I have servers with windows 2008 r2 that they are in workgroup . I want somehow to prevent user that own this Virtual Server to change network settings ( tcp/ip)  .

The user is a local admin to this server. If in local group policy prevent the tcp settings will it work ?

Thanks
Avatar of Nick Rhode
Nick Rhode
Flag of United States of America image

Yes but will apply to all and if you wanted to make a change you would have to remove that policy in order to do so.
ASKER CERTIFIED SOLUTION
Avatar of Mike Kline
Mike Kline
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Anestis Psomas
Anestis Psomas

ASKER

Thanks for your replies. I have test it right now but the local admin user can change the tcp settings.

It seems that settings in gpedit.msc does not work for local admins.

I create another user and i put him in power users and it seems that it is blocked in this user.

Any ideas?
Can you run an RSoP report for that admin account.  What does that tell you?

Thanks

Mike
I see that the " Prohibit TCP/IP Advance configuration " is enabled also the " Prohibit access to properties of a lan connection " is enabled.

But when i logon with the local admin it doesn't work . With power user it works.
Does the admin have read and apply to that group policy in the ACL?

Thanks

Mike
How can i see this mike ?

Thanks