Asked by:
Changing TCP/IP settings without Admin Rights

Question
-
Hello There,
We have bunch of laptop users who are basically in Network support so very often they have to change IP addresses on their machines so we ended up giving them Local Admin privilege on their machines.
This is risky and we want to reduce this risk.
Is there any option to provide TCP/IP settings change privilege to these users without giving them Admin Rights? Please suggest.
Thanks,
Maqsood
Maqsood Mohammed Senior Systems Engineer MCITP-Enterprise Admin & ITILv3 Foundation Certified
- Moved by Brandon Records Thursday, December 10, 2015 7:15 PM Moved to more appropriate forum.
Sunday, November 22, 2015 6:03 AM
All replies
-
Hi,
According to your expectation, we can add those user to Network Configuration Operators group so that they can change the TCP/IP without admin privilege.
For your reference: https://technet.microsoft.com/en-us/library/cc754921(v=ws.10).aspx
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.
Allen Wang
TechNet Community SupportMonday, November 23, 2015 7:17 AM -
Hi Allen,
Thanks for your response, i just tried this unfortunately it doesn't work.
Please see the screenshots attached.
Thanks,
Maqsood
Maqsood Mohammed Senior Systems Engineer MCITP-Enterprise Admin & ITILv3 Foundation Certified
Monday, November 23, 2015 7:35 AM -
Hi,
According to my test, it works. Please try below steps to create account and assign permission:
1. Login administrator account and new a standard account.
2. Open Computer Management, open Network Configuration Operators group and add new account in this group.
3. Sign in with new account, open Network and Sharing center to modify the setting with network.
Note: it will popup to sign-in administrator credential, then login as new account and password.Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.
Allen Wang
TechNet Community SupportTuesday, November 24, 2015 8:31 AM -
Did you login into local security as the admin and has some one changed your account to a standard user
right click local security if the block is greyed out then one of your brighter employees pranked you and changed your account to a standard user also
there are option's you can use scripts, safe mode
you need to be using 8.1 pro and use GPEDIT.MSC to control that
if you can't change your own account back to an administrator account then you will have to login into repair mode
using f11 and then use your password on your account and then you can change back to a ADMIN Account
then after that I would lock uber employee out using GPEDIT.MSC
looking at your screen shot's first thing that comes to my mind is you don't even have LOCAL ADMIN Privileges
Also you should use care and read about GROUP's on TechNet as these all have different right's as to what they can do
- Edited by ErickySoft.Inc Thursday, November 26, 2015 1:02 AM
Thursday, November 26, 2015 1:00 AM -
Hello Allen,
I did try the same thing but still i get the error and i am doing this on Win7 Enterprise machine.
Regards,
Maqsood
Maqsood Mohammed Senior Systems Engineer MCITP-Enterprise Admin & ITILv3 Foundation Certified
Thursday, December 3, 2015 10:29 AM -
If your issue is occurring on Windows 7 Enterprise then you have posted this thread in the wrong forum. This forum is for Windows 8.1 security issues. I will move this thread to the appropriate forum for Windows 7 security issues.
Brandon
Windows Outreach Team- IT Pro
Windows for IT Pros at TechNetThursday, December 10, 2015 7:15 PM -
Hi
You must open Computer management with admin rights. If you add user to the group, then log off and on so order change is valid
Ales
Friday, June 26, 2020 6:09 PM