Domain user unable to view LAN connection properties

[joeffm]

This involves a Windows XP PC but I'm posting it here because I know it has something to do with group policy. My domain users are unable to view/change any LAN connection properties. This is what I want under most circumstances, but I have a user that I would like to troubleshoot remotely and I need to view the LAN connection properties. I'm sure it is a GPO somewhere but I can't find it. Anyway, the error I get is "Some of the controls on the property sheet are disabled because you do not have sufficient privilege to access or change them". Any advice????

 

[Stevehewitt]

There are GPO's to deny or grant access to various parts of the network connection area within XP, however I'm pretty sure that standard users cannot modify TCP/IP settings anyway.
Maybe worth doing a blank install of XP on a test box, create a standard user and see if they can do it then.

Good Luck,




Steve.

"They have the internet on computers now!" - Homer Simpson

 

[1LUV1T]

just to ask a similiar question, all my network users are set to local administrators by default, what policy can i implement to disable changing tcp/ip settings? I don't recall any specific group policy that would allow this (it'll block network connections from cpanel but not just tcp/ip settings).

 

[unclerico]

joeffm, I'm assuming by your error message that your users are not local admins on their respective machines? What remote support software do you use and does it run as a service on the machines? If it does run as a service (like WinVNC) then you can have your user log off and then take control by logging in as yourself (as long as you are local admin on their machine) and then add the user to the Network Configuration Operators local group.

 

[joeffm]

unclerico, The users are local admins of the machine. We use Remote Assistance from Microsoft for remote assistance.

 

[1LUV1T]

bump?

 

[DTracy]

You could move the one user into admin temporarily to do the testing/configuration and then when completed move back to user. We do this with the Courts/Probation and it works well.

David.

 

[1LUV1T]

I know i'm kind of threat jacking here so i'm not sure if your response was to my question or joeffm's, but in my case, since all my users are local administrators on their PC, they can modify their network connections. What I need to know is if i can disable editing tcp/ip settings from Local Area Connection (i dont recall a group policy like that anywhere).