Re: Assigning domain users rights to change ip address

hi I have tried to do so but power user also dose not have rights to change
the password

"Al Mulnick" wrote:

> I would think that is correct, but I have to wonder why somebody would
> hesitate to configure a user as a local admin but not as a power user.
>
> For reference, here's a list of the rights as they are by default on the
> local machine for server
> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/b93ed1f7-7ed0-457e-956a-25bb4ebd067f.mspx
>
> and for XP
> http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sag_seconceptsunprivs.mspx
>
> Placing domain users into the local Power Users group would likely do what
> you want without giving so much away on the DC's.
>
> Keep in mind that changing an IP address is a big deal and should require
> elevated privileges. The same way that time should require additional
> rights.
>
> Al
>
> "Mike Brannigan [MSFT]" <mikebran@xxxxxxxxxxxxxxxxxxxx> wrote in message
> news:ejhQokrNFHA.2588@xxxxxxxxxxxxxxxxxxxxxxx
> > "yasir" <yasir@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> > news:794B0B07-114E-4F97-A681-321D530AE398@xxxxxxxxxxxxxxxx
> >> hello
> >> I am working in a cisco lab where domain users required to change their
> >> PC's
> >> IP address frequantly according to the lab requirement but the problem is
> >> that domain users don't have a right to do so and if we add them in
> >> administrators group they will gain full access,please help so, domain
> >> user
> >> could gain a right to change ip setting through network connection.
> >> thank you
> >
> > From memory a Power User group member may also be able to change the IP
> > address settings (still a highly privileged local account).
> >
> > --
> >
> > Regards,
> >
> > Mike
> > --
> > Mike Brannigan [Microsoft]
> >
> > This posting is provided "AS IS" with no warranties, and confers no
> > rights
> >
> > Please note I cannot respond to e-mailed questions, please use these
> > newsgroups
> >
> > "yasir" <yasir@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> > news:794B0B07-114E-4F97-A681-321D530AE398@xxxxxxxxxxxxxxxx
> >> hello
> >> I am working in a cisco lab where domain users required to change their
> >> PC's
> >> IP address frequantly according to the lab requirement but the problem is
> >> that domain users don't have a right to do so and if we add them in
> >> administrators group they will gain full access,please help so, domain
> >> user
> >> could gain a right to change ip setting through network connection.
> >> thank you
> >
> >
>
>
>
.