Is there a way through Group Policies (2003 Server) ,or any other method, to give our managers at our remote locations permissions to change network settings such, as IP addresses, but at the same time we don't want to give them too much permissions that would not allow them to be able to install software?
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Network Access
- Thread starter force5
- Start date
No, that requires power user or admin priviledges on the local machine, both of which allow the install of software.
Rather than even have a need to change IP information, put an inexpensive firewall device like a linksys or dlink router/firewall that can issue IPs via DHCP. Then there is no management needed or if you need someone to get reservations you can give the manager the password to the linksys to manage the DHCP.
I hope you find this post helpful.
Regards,
Mark
Check out my scripting solutions at
Rather than even have a need to change IP information, put an inexpensive firewall device like a linksys or dlink router/firewall that can issue IPs via DHCP. Then there is no management needed or if you need someone to get reservations you can give the manager the password to the linksys to manage the DHCP.
I hope you find this post helpful.
Regards,
Mark
Check out my scripting solutions at
- Thread starter
- #3
Mark...thanks on your reply! I appreciate the knowledge about what the rights/permissions would accomplish. But, let me back up a little...We had a unique situation last week where one of our remote locations had a router and switch go out. This location at the time was using static addresses because there were only 2 people at this location and we hadn't gotten around to using dhcp(this was all set up before I hired in) I was tied up and could not make the 2 hour drive to fix it myself so we hired a 3rd party tech to go to the site. This tech was able to install the new router and enable dhcp, but the workstations up there were still set to static. I couldn't connect remotely. So we gave her the local admin password to that pc so she could make the changes herself so the tech could continue his work. I then changed the local admin password once I was able to connect. But my manager is simply looking at the best and most efficient way to accomplish this, if the issue ever arrises again...even if it is a different set of circumstances.
You could look at using scripts with RunAs as a potential solution, but to make the changes you are asking about requires the rights mentioned above. No way to workaround this that I am aware.
I hope you find this post helpful.
Regards,
Mark
Check out my scripting solutions at
I hope you find this post helpful.
Regards,
Mark
Check out my scripting solutions at
- Status
Similar threads
- Locked
- Question
- Locked
- Question