Can users change IP Settings In A Domain

[Rick]

Dear Users and MVP's,

In the past few days calls have been coming in about
users not being able to connect to the internet or
network. When I check it out the IP configuration
settings were changed. We have very tight Group Policies
on a Windows 2000 Advanced Server. Can a user change the
IP settings when the GP is in an almost locked down state
for the average user?

Thanks,
Rick

 

[Robert Moir]

Dear Users and MVP's,

In the past few days calls have been coming in about
users not being able to connect to the internet or
network. When I check it out the IP configuration
settings were changed. We have very tight Group Policies
on a Windows 2000 Advanced Server. Can a user change the
IP settings when the GP is in an almost locked down state
for the average user?

Define "Almost locked down state". Either a user has permission to access
and change the IP settings or they don't, and thats up to whoever sets their
system policies. What access rights do the users have on their workstations?

Have you investigated to see if they've been somewhere they shouldn't and
picked up a nice bit of spyware or a trojan that fiddles with things?


--
--
Rob Moir, Microsoft MVP for servers & security
Website - http://www.robertmoir.co.uk
Virtual PC 2004 FAQ - http://www.robertmoir.co.uk/win/VirtualPC2004FAQ.html

Kazaa - Software update services for your Viruses and Spyware.

 

[Colin Nash [MVP]]

Users who are members of the local Administrators group, Network
Configuration Operators group and (possibly... not sure) the Power Users
group can change those settings.

If you are using DHCP, I'd be more suspicious about there being a problem
with the scope... what are the odds that people would all of a sudden start
tinkering for no particular reason (unless they are developers or wannabe
techies! )