Using group policies to prohibit domain users with local administrator permissions from changing network configurations

If you do not have administrator permissions, you are not authorized to change the IP address of your computer by default. In this example, the Administrator is prohibited from changing the IP address of the computer. All logged-on users are local administrators of the computer.

The Network Connections Service manages objects in the "Network and dial-up connections" folder, where you can view LAN and remote connections. If you stop the service, you cannot access the local connection to change the IP address.

In this example, you can change the IP address of a local user, a domain user, a common user, and an administrator.

If domain management is allowed to modify the IP address of the customer's computer, you can set the Network Connections Service Startup type to "Manual", and set the security of this service to only allow the domain administrator to start.

The method is as follows:

1. Set the Group Policy to set the computer network connections of the Department that will Disable IP address change to manual start.

2. Set network connections to only allow full control of the Domain Admins group. Others (everyone) read-only 650) This. width = 650; "src ="/e/u261/themes/default/images/spacer.gif "style =" font-family: sans-serif; font-size: 16px; Border: 1px solid RGB (221,221,221); Background: URL ("") No-repeat 50% 50%; "alt =" spacer.gif "/>

650) This. length = 650; "src =" http://s3.51cto.com/wyfs02/M01/4A/2E/wKioL1Qjs3Cz5ZiQAAVFDiAEyqw186.jpg "Title =" qq 40925132659.png "width =" 750 "Height =" 605 "border =" 0 "hspace =" 0 "vspace =" 0 "style =" Width: 750px; Height: 605px; "alt =" wkiol1qjjxz5ziqaavfdiaeyqw186.jpg "/>

3. Apply group policies (gpupdate/force) on domain control)

4. restart a computer in the department where you want to disable IP address change. At this time, you will find that the NIC icon in the lower-right corner of the computer shows a Red Cross, but the ipconfig view shows that the obtained IP address is normal and the Internet access is normal, but the NIC icon is missing, therefore, even the local administrator cannot change the IP address. It is unavailable when the Network Connections Service is started.

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M01/4A/2E/wKioL1Qjs8HTZdwYAAKFrYn8z70839.jpg "Title =" 1.jpg" alt = "wkiol1qjs8htzdwyaakfryn8z70839.jpg"/>

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M02/4A/2C/wKiom1Qjs53C_uOsAASgi-AcJBE644.jpg "Title =" 2.jpg" alt = "wKiom1Qjs53C_uOsAASgi-AcJBE644.jpg"/>

5. log on to the computer using the Domain Admins user

6. Start the Network Connections Service. You can change the network configuration and stop the service after the change.

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M00/4A/2C/wKiom1Qjs8PTJfsVAAaMymxNnlc063.jpg "Title =" 4.jpg" alt = "wkiom1qjs8ptjfsvaaamymxnnlc063.jpg"/>

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M00/4A/2E/wKioL1Qjs-jy9pr7AAH9CL1L9FU186.jpg "Title =" 5.jpg" alt = "wKioL1Qjs-jy9pr7AAH9CL1L9FU186.jpg"/>

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M01/4A/2E/wKioL1Qjs-ij6eqCAANM3jMKGrg739.jpg "style =" width: 740px; Height: 517px; "Title =" 6.jpg" width = "740" Height = "517" border = "0" hspace = "0" vspace = "0" alt = "wKioL1Qjs-ij6eqCAANM3jMKGrg739.jpg"/>

This article is from the "Sean" blog, please be sure to keep this source http://chengfuxing.blog.51cto.com/5168625/1558069

Using group policies to prohibit domain users with local administrator permissions from changing network configurations