Re: Disable TCP/IP for Local Administrators

Tech-Archive recommends: Fix windows errors by optimizing your registry

<insidematrix@xxxxxxxxx> wrote in message
news:1174486374.945088.211960@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
On Mar 21, 12:49 pm, Florian Frommherz
<flor...@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
Howdie!

insidemat...@xxxxxxxxx wrote:
Many users in my organisation has Local Administrator Rights.
I Have enabled many restrictions from User configuration ->
Administrative Templates -> Network -> Network connections but doesn't
apply to local administrators.
any other workaround to totally disable changing of ip addresses, etc.

No - since they're admins, they could run regedit or scripts to modify
the IP settings anyway.

As stupid as it sounds: make them run as nonadmins.

cheers,

Florian
--
Nachwuchsadmin aus dem Süddeutschen/Germany.
eMail: Vorname [bei] frickelsoft [Punkt] net.
blog:http://www.frickelsoft.net/blog.

it sounds stupid that they cannot use touchpad prorperly but can
change IP addresses. The problem is that I don't know how but they are
messing up with the tcp/ip settings and I.T. has to suffer.



If they cannot use a touchpad they surely have no place
running with administrator privs.

Florian is correct, that there is no way to block admins from
doing things. There are little progs they can get from the net
that makes altering network config a no brainer (given that
they have rights to do so).

Have you considered altering the permissions on the reg keys
where network config settings are stored so that not all admins
but only the ones you control have write to those keys??

Other than such as that, which is a fudge approach, I know of
no settings designed to offer what you are after. The design of
pre-Vista for network settings is that administrators would know
what should be and so they all have that ability.

Roger


.

Relevant Pages

  • RE: Publish to External FrontPage Server
    ... meaning Auto config, use proxy I am able to connect to the remote website. ... How can I make this work without having to disable the IE settings everytime ... Publish to External FrontPage Server ...
    (microsoft.public.isa)
  • Re: [kde] Hangover from kde 3.5 in kde4 when launching file manager after plugging in a SSC card
    ... generically aka system settings", settings (got that, the kcontrol aka ... User Settings", "File Associations". ... the mimetype is determined automatically (by file ... it's very likely a system config ...
    (KDE)
  • Re: Justified moaning?, I like to think so.
    ... I might have guessed you were going to ask for the steps to reproduce ... caching the settings for the current project and then either: ... Erroneously combining the new config with what's cached in some way ... new projects default to either Debug or Release and are those default ...
    (borland.public.delphi.non-technical)
  • Re: IPPhone provisioning in CE 6 R2
    ... the device will pickup and autoupdate the config. ... // check where we should get bootstrap server info from ... FTP server. ... But still the device didnt apply the settings as i think i had made ...
    (microsoft.public.windowsce.embedded)
  • Re: appsetting in class doesnt work
    ... configuration and putting application scope settings in the file by using ... First the config file: ... Public Sub SetTestsetting() ... of TestSetting in app config file ...
    (microsoft.public.dotnet.languages.vb)