how restricted users can change their IP

K

Khalid Naeem

Guest
we are running a workgroup based network and their are two different

internets are being used in the network currently all users have

administrative rights so that they can easily change the IP class to shift

from one internet to the other

Now i want to restrict users but i still want that users change their IP by

themselves

Kindly help me

 
C

Ciro

Guest
Hey Kalid,

In what way should the users be restricted? Which rights do you want to

deny? (Change background, etc...)

Kind Regards,

Ciro.

"Khalid Naeem" <KhalidNaeem@discussions.microsoft.com> schreef in bericht

news:6E3B1E99-A426-43D4-AA83-0003660C45FB@microsoft.com...<span style="color:blue">

> we are running a workgroup based network and their are two different

> internets are being used in the network currently all users have

> administrative rights so that they can easily change the IP class to shift

> from one internet to the other

>

> Now i want to restrict users but i still want that users change their IP

> by

> themselves

>

>

> Kindly help me </span>

 
M

Michael D. Ober

Guest
"Ciro" <ciro@morra.us> wrote in message

news:OnQtioQrIHA.5580@TK2MSFTNGP04.phx.gbl...<span style="color:blue">

> Hey Kalid,

>

> In what way should the users be restricted? Which rights do you want to

> deny? (Change background, etc...)

>

> Kind Regards,

>

> Ciro.

>

> "Khalid Naeem" <KhalidNaeem@discussions.microsoft.com> schreef in bericht

> news:6E3B1E99-A426-43D4-AA83-0003660C45FB@microsoft.com...<span style="color:green">

>> we are running a workgroup based network and their are two different

>> internets are being used in the network currently all users have

>> administrative rights so that they can easily change the IP class to

>> shift

>> from one internet to the other

>>

>> Now i want to restrict users but i still want that users change their IP

>> by

>> themselves

>>

>>

>> Kindly help me</span>

>

></span>

Since windows allows you to put multiple IPs on an interface, how about

simply adding both networks to the interface?

Mike Ober.

 
K

Khalid Naeem

Guest
hi ciro ristricted user mean that when we create a user in windows xp it

offers us two types of user accounts one is administrator and the other one

is user account i dont want to apply any policy or anyother thing i just want

that a restricted user may change their IP by themselves

"Michael D. Ober" wrote:

<span style="color:blue">

> "Ciro" <ciro@morra.us> wrote in message

> news:OnQtioQrIHA.5580@TK2MSFTNGP04.phx.gbl...<span style="color:green">

> > Hey Kalid,

> >

> > In what way should the users be restricted? Which rights do you want to

> > deny? (Change background, etc...)

> >

> > Kind Regards,

> >

> > Ciro.

> >

> > "Khalid Naeem" <KhalidNaeem@discussions.microsoft.com> schreef in bericht

> > news:6E3B1E99-A426-43D4-AA83-0003660C45FB@microsoft.com...<span style="color:darkred">

> >> we are running a workgroup based network and their are two different

> >> internets are being used in the network currently all users have

> >> administrative rights so that they can easily change the IP class to

> >> shift

> >> from one internet to the other

> >>

> >> Now i want to restrict users but i still want that users change their IP

> >> by

> >> themselves

> >>

> >>

> >> Kindly help me</span>

> >

> ></span>

>

> Since windows allows you to put multiple IPs on an interface, how about

> simply adding both networks to the interface?

>

> Mike Ober.

>

>

> </span>

 
M

Michael D. Ober

Guest
"Khalid Naeem" <KhalidNaeem@discussions.microsoft.com> wrote in message

news:AFD0C36E-34ED-46C3-9724-1E6585B49418@microsoft.com...<span style="color:blue">

> hi ciro ristricted user mean that when we create a user in windows xp it

> offers us two types of user accounts one is administrator and the other

> one

> is user account i dont want to apply any policy or anyother thing i just

> want

> that a restricted user may change their IP by themselves

></span>

XP only allow administrators to change the IP address. Your two options are

a router that know about both networks or putting both networks on every

machine.

<span style="color:blue">

> "Michael D. Ober" wrote:

><span style="color:green">

>> "Ciro" <ciro@morra.us> wrote in message

>> news:OnQtioQrIHA.5580@TK2MSFTNGP04.phx.gbl...<span style="color:darkred">

>> > Hey Kalid,

>> >

>> > In what way should the users be restricted? Which rights do you want to

>> > deny? (Change background, etc...)

>> >

>> > Kind Regards,

>> >

>> > Ciro.

>> >

>> > "Khalid Naeem" <KhalidNaeem@discussions.microsoft.com> schreef in

>> > bericht

>> > news:6E3B1E99-A426-43D4-AA83-0003660C45FB@microsoft.com...

>> >> we are running a workgroup based network and their are two different

>> >> internets are being used in the network currently all users have

>> >> administrative rights so that they can easily change the IP class to

>> >> shift

>> >> from one internet to the other

>> >>

>> >> Now i want to restrict users but i still want that users change their

>> >> IP

>> >> by

>> >> themselves

>> >>

>> >>

>> >> Kindly help me

>> >

>> ></span>

>>

>> Since windows allows you to put multiple IPs on an interface, how about

>> simply adding both networks to the interface?

>>

>> Mike Ober.

>>

>>

>></span>

></span>

 
C

Ciro

Guest
Okay Khalid,

So the question is how can "normal users" change their IP adres or how can

they connect to another network...

Like with "power users" changing the network settings is the big

restriction.

This could be difficult... :|

"Khalid Naeem" <KhalidNaeem@discussions.microsoft.com> schreef in bericht

news:AFD0C36E-34ED-46C3-9724-1E6585B49418@microsoft.com...<span style="color:blue">

> hi ciro ristricted user mean that when we create a user in windows xp it

> offers us two types of user accounts one is administrator and the other

> one

> is user account i dont want to apply any policy or anyother thing i just

> want

> that a restricted user may change their IP by themselves

>

> "Michael D. Ober" wrote:

><span style="color:green">

>> "Ciro" <ciro@morra.us> wrote in message

>> news:OnQtioQrIHA.5580@TK2MSFTNGP04.phx.gbl...<span style="color:darkred">

>> > Hey Kalid,

>> >

>> > In what way should the users be restricted? Which rights do you want to

>> > deny? (Change background, etc...)

>> >

>> > Kind Regards,

>> >

>> > Ciro.

>> >

>> > "Khalid Naeem" <KhalidNaeem@discussions.microsoft.com> schreef in

>> > bericht

>> > news:6E3B1E99-A426-43D4-AA83-0003660C45FB@microsoft.com...

>> >> we are running a workgroup based network and their are two different

>> >> internets are being used in the network currently all users have

>> >> administrative rights so that they can easily change the IP class to

>> >> shift

>> >> from one internet to the other

>> >>

>> >> Now i want to restrict users but i still want that users change their

>> >> IP

>> >> by

>> >> themselves

>> >>

>> >>

>> >> Kindly help me

>> >

>> ></span>

>>

>> Since windows allows you to put multiple IPs on an interface, how about

>> simply adding both networks to the interface?

>>

>> Mike Ober.

>>

>>

>> </span></span>

 
M

Maxxine

Guest
Hi Khalid,

May be you could use the Network Configuration Operators Group available in

"Local Users and Groups" under Computer Management. See

http://support.microsoft.com/kb/297938 for more description. At the outset,

it does not seems risky to put users in this group.

Considering that you would like to do it on a network, you might want to

consider using "Restricted Groups" feature of group policy to assign users to

the local group at logon. You might find this site

http://www.windowsecurity.com/articles/Usi...ted-Groups.html helpful

Cheers

Maxxine

"Khalid Naeem" wrote:

<span style="color:blue">

> we are running a workgroup based network and their are two different

> internets are being used in the network currently all users have

> administrative rights so that they can easily change the IP class to shift

> from one internet to the other

>

> Now i want to restrict users but i still want that users change their IP by

> themselves

>

>

> Kindly help me</span>

 
M

Maxxine

Guest
Hi Khalid,

Sorry, I didn't check you are on workgroup. Group Policy works only on AD

based networks.

For your case you might try some creativity with NET LOCALGROUP command

scripted in a batch file. The trick is how to execute this for all users

without having to go to every single machine.

Let me know whether my posts were useful.

Regards - Maxxine

"Maxxine" wrote:

<span style="color:blue">

> Hi Khalid,

>

> May be you could use the Network Configuration Operators Group available in

> "Local Users and Groups" under Computer Management. See

> http://support.microsoft.com/kb/297938 for more description. At the outset,

> it does not seems risky to put users in this group.

>

> Considering that you would like to do it on a network, you might want to

> consider using "Restricted Groups" feature of group policy to assign users to

> the local group at logon. You might find this site

> http://www.windowsecurity.com/articles/Usi...ted-Groups.html helpful

>

> Cheers

> Maxxine

>

>

> "Khalid Naeem" wrote:

> <span style="color:green">

> > we are running a workgroup based network and their are two different

> > internets are being used in the network currently all users have

> > administrative rights so that they can easily change the IP class to shift

> > from one internet to the other

> >

> > Now i want to restrict users but i still want that users change their IP by

> > themselves

> >

> >

> > Kindly help me</span></span>

 
You must log in or register to reply here.
Top Bottom