"Rob" <(E-Mail Removed)> wrote in message
news:1CF0E1EB-844F-429D-9516-(E-Mail Removed)...
>I am the network admin. We have the policy in effect on shop floor
> computers. Its to prevent internet access. I am curious to know, with
> the
> policy in effect to prevent the user from going to the properties of the
> network connections, if the IP address can be changed at the command
> prompt
> and change it from static to dns. If so, i want to prevent that also.
>
If they have local administrator or power user rights they will be able to
change this. The policy should change back as group policy is refreshed but
I don't know if the TCP/IP properties would change back until a reboot. The
solution is to make sure they don't have local (or domain) power user or
administrator rights. You could also look at loop back processing for group
policy. You can totally lock down a computer with this method.
--
Kerry Brown
Microsoft MVP - Shell/User
http://www.vistahelp.ca