Guest Khalid Naeem Posted May 2, 2008 Posted May 2, 2008 we are running a workgroup based network and their are two different internets are being used in the network currently all users have administrative rights so that they can easily change the IP class to shift from one internet to the other Now i want to restrict users but i still want that users change their IP by themselves Kindly help me Quote
Guest Ciro Posted May 3, 2008 Posted May 3, 2008 Hey Kalid, In what way should the users be restricted? Which rights do you want to deny? (Change background, etc...) Kind Regards, Ciro. "Khalid Naeem" <KhalidNaeem@discussions.microsoft.com> schreef in bericht news:6E3B1E99-A426-43D4-AA83-0003660C45FB@microsoft.com...<span style="color:blue"> > we are running a workgroup based network and their are two different > internets are being used in the network currently all users have > administrative rights so that they can easily change the IP class to shift > from one internet to the other > > Now i want to restrict users but i still want that users change their IP > by > themselves > > > Kindly help me </span> Quote
Guest Michael D. Ober Posted May 3, 2008 Posted May 3, 2008 "Ciro" <ciro@morra.us> wrote in message news:OnQtioQrIHA.5580@TK2MSFTNGP04.phx.gbl...<span style="color:blue"> > Hey Kalid, > > In what way should the users be restricted? Which rights do you want to > deny? (Change background, etc...) > > Kind Regards, > > Ciro. > > "Khalid Naeem" <KhalidNaeem@discussions.microsoft.com> schreef in bericht > news:6E3B1E99-A426-43D4-AA83-0003660C45FB@microsoft.com...<span style="color:green"> >> we are running a workgroup based network and their are two different >> internets are being used in the network currently all users have >> administrative rights so that they can easily change the IP class to >> shift >> from one internet to the other >> >> Now i want to restrict users but i still want that users change their IP >> by >> themselves >> >> >> Kindly help me</span> > ></span> Since windows allows you to put multiple IPs on an interface, how about simply adding both networks to the interface? Mike Ober. Quote
Guest Khalid Naeem Posted May 5, 2008 Posted May 5, 2008 hi ciro ristricted user mean that when we create a user in windows xp it offers us two types of user accounts one is administrator and the other one is user account i dont want to apply any policy or anyother thing i just want that a restricted user may change their IP by themselves "Michael D. Ober" wrote: <span style="color:blue"> > "Ciro" <ciro@morra.us> wrote in message > news:OnQtioQrIHA.5580@TK2MSFTNGP04.phx.gbl...<span style="color:green"> > > Hey Kalid, > > > > In what way should the users be restricted? Which rights do you want to > > deny? (Change background, etc...) > > > > Kind Regards, > > > > Ciro. > > > > "Khalid Naeem" <KhalidNaeem@discussions.microsoft.com> schreef in bericht > > news:6E3B1E99-A426-43D4-AA83-0003660C45FB@microsoft.com...<span style="color:darkred"> > >> we are running a workgroup based network and their are two different > >> internets are being used in the network currently all users have > >> administrative rights so that they can easily change the IP class to > >> shift > >> from one internet to the other > >> > >> Now i want to restrict users but i still want that users change their IP > >> by > >> themselves > >> > >> > >> Kindly help me</span> > > > ></span> > > Since windows allows you to put multiple IPs on an interface, how about > simply adding both networks to the interface? > > Mike Ober. > > > </span> Quote
Guest Michael D. Ober Posted May 5, 2008 Posted May 5, 2008 "Khalid Naeem" <KhalidNaeem@discussions.microsoft.com> wrote in message news:AFD0C36E-34ED-46C3-9724-1E6585B49418@microsoft.com...<span style="color:blue"> > hi ciro ristricted user mean that when we create a user in windows xp it > offers us two types of user accounts one is administrator and the other > one > is user account i dont want to apply any policy or anyother thing i just > want > that a restricted user may change their IP by themselves ></span> XP only allow administrators to change the IP address. Your two options are a router that know about both networks or putting both networks on every machine. <span style="color:blue"> > "Michael D. Ober" wrote: ><span style="color:green"> >> "Ciro" <ciro@morra.us> wrote in message >> news:OnQtioQrIHA.5580@TK2MSFTNGP04.phx.gbl...<span style="color:darkred"> >> > Hey Kalid, >> > >> > In what way should the users be restricted? Which rights do you want to >> > deny? (Change background, etc...) >> > >> > Kind Regards, >> > >> > Ciro. >> > >> > "Khalid Naeem" <KhalidNaeem@discussions.microsoft.com> schreef in >> > bericht >> > news:6E3B1E99-A426-43D4-AA83-0003660C45FB@microsoft.com... >> >> we are running a workgroup based network and their are two different >> >> internets are being used in the network currently all users have >> >> administrative rights so that they can easily change the IP class to >> >> shift >> >> from one internet to the other >> >> >> >> Now i want to restrict users but i still want that users change their >> >> IP >> >> by >> >> themselves >> >> >> >> >> >> Kindly help me >> > >> ></span> >> >> Since windows allows you to put multiple IPs on an interface, how about >> simply adding both networks to the interface? >> >> Mike Ober. >> >> >></span> ></span> Quote
Guest Ciro Posted May 5, 2008 Posted May 5, 2008 Okay Khalid, So the question is how can "normal users" change their IP adres or how can they connect to another network... Like with "power users" changing the network settings is the big restriction. This could be difficult... :| "Khalid Naeem" <KhalidNaeem@discussions.microsoft.com> schreef in bericht news:AFD0C36E-34ED-46C3-9724-1E6585B49418@microsoft.com...<span style="color:blue"> > hi ciro ristricted user mean that when we create a user in windows xp it > offers us two types of user accounts one is administrator and the other > one > is user account i dont want to apply any policy or anyother thing i just > want > that a restricted user may change their IP by themselves > > "Michael D. Ober" wrote: ><span style="color:green"> >> "Ciro" <ciro@morra.us> wrote in message >> news:OnQtioQrIHA.5580@TK2MSFTNGP04.phx.gbl...<span style="color:darkred"> >> > Hey Kalid, >> > >> > In what way should the users be restricted? Which rights do you want to >> > deny? (Change background, etc...) >> > >> > Kind Regards, >> > >> > Ciro. >> > >> > "Khalid Naeem" <KhalidNaeem@discussions.microsoft.com> schreef in >> > bericht >> > news:6E3B1E99-A426-43D4-AA83-0003660C45FB@microsoft.com... >> >> we are running a workgroup based network and their are two different >> >> internets are being used in the network currently all users have >> >> administrative rights so that they can easily change the IP class to >> >> shift >> >> from one internet to the other >> >> >> >> Now i want to restrict users but i still want that users change their >> >> IP >> >> by >> >> themselves >> >> >> >> >> >> Kindly help me >> > >> ></span> >> >> Since windows allows you to put multiple IPs on an interface, how about >> simply adding both networks to the interface? >> >> Mike Ober. >> >> >> </span></span> Quote
Guest Maxxine Posted May 28, 2008 Posted May 28, 2008 Hi Khalid, May be you could use the Network Configuration Operators Group available in "Local Users and Groups" under Computer Management. See http://support.microsoft.com/kb/297938 for more description. At the outset, it does not seems risky to put users in this group. Considering that you would like to do it on a network, you might want to consider using "Restricted Groups" feature of group policy to assign users to the local group at logon. You might find this site http://www.windowsecurity.com/articles/Usi...ted-Groups.html helpful Cheers Maxxine "Khalid Naeem" wrote: <span style="color:blue"> > we are running a workgroup based network and their are two different > internets are being used in the network currently all users have > administrative rights so that they can easily change the IP class to shift > from one internet to the other > > Now i want to restrict users but i still want that users change their IP by > themselves > > > Kindly help me</span> Quote
Guest Maxxine Posted May 28, 2008 Posted May 28, 2008 Hi Khalid, Sorry, I didn't check you are on workgroup. Group Policy works only on AD based networks. For your case you might try some creativity with NET LOCALGROUP command scripted in a batch file. The trick is how to execute this for all users without having to go to every single machine. Let me know whether my posts were useful. Regards - Maxxine "Maxxine" wrote: <span style="color:blue"> > Hi Khalid, > > May be you could use the Network Configuration Operators Group available in > "Local Users and Groups" under Computer Management. See > http://support.microsoft.com/kb/297938 for more description. At the outset, > it does not seems risky to put users in this group. > > Considering that you would like to do it on a network, you might want to > consider using "Restricted Groups" feature of group policy to assign users to > the local group at logon. You might find this site > http://www.windowsecurity.com/articles/Usi...ted-Groups.html helpful > > Cheers > Maxxine > > > "Khalid Naeem" wrote: > <span style="color:green"> > > we are running a workgroup based network and their are two different > > internets are being used in the network currently all users have > > administrative rights so that they can easily change the IP class to shift > > from one internet to the other > > > > Now i want to restrict users but i still want that users change their IP by > > themselves > > > > > > Kindly help me</span></span> Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.