Using Netsh assign laptop to different networks

[Guest]

We have a user with an XP Laptop which needs to connect to 2
different networks (2 seperate locations). I have created the
batch files to do the Netsh commands and all works fine.

The problem is the user is restricted on the laptop (no administration
rights) and when running the batch file I'm receiving an "Access Denied"
error message. The user has full rights to the 2 batch files and also the
Netsh command. What other file(s) does this command affect ?

Thank you in advance for your assistance!

 

[Chuck]

We have a user with an XP Laptop which needs to connect to 2
different networks (2 seperate locations). I have created the
batch files to do the Netsh commands and all works fine.

The problem is the user is restricted on the laptop (no administration
rights) and when running the batch file I'm receiving an "Access Denied"
error message. The user has full rights to the 2 batch files and also the
Netsh command. What other file(s) does this command affect ?

Thank you in advance for your assistance!

Without knowing what the batch files do, it's kind of hard for us to suggest
what problems they're having.

Why not copy the contents of each into your next post?

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Guest]

Chuck:

The batch files both work when logged on to the laptop and an Administrator
type user. But when a user without administration capability tries to execute
the batch files they receive a "Access Denied".

The batch files are as follows:
netsh interface ip set address "Port Replicator" static 10.7.14.100
255.255.255.128 10.7.14.1 1

netsh interface ip set address "Port Replicator" static 10.5.46.190
255.255.255.0 10.5.46.1 1

Thanks Again!

 

[Chuck]

Chuck:

The batch files both work when logged on to the laptop and an Administrator
type user. But when a user without administration capability tries to execute
the batch files they receive a "Access Denied".

The batch files are as follows:
netsh interface ip set address "Port Replicator" static 10.7.14.100
255.255.255.128 10.7.14.1 1

netsh interface ip set address "Port Replicator" static 10.5.46.190
255.255.255.0 10.5.46.1 1

Thanks Again!

OK, it's a pretty simple situation - running the batch files requires
administrative authority. The (non admin) user may have access to the files,
and to "netsh.exe", he just doesn't have authority to execute the changes
created by "netsh.exe".

In general, administrative authority is reserved to members of the
Administrators group. There are some settings that can be adjusted; if you're
lucky, you'll find settings under Local Security Policies (Control Panel -
Administrative Tools) - User Rights Assignment.

In perusing the list of policies there, nothing jumps out at me. It's possible
that I could have missed something, or it's also possible that there is a
registry setting that's not listed under LSP.

You may want to take this up in the microsoft.public.windowsxp.general or
microsoft.public.windowsxp.help_and_support newsgroup, the folks there are more
informed about topics that aren't strictly related to network issues. Maybe
somebody there can help you better.

Or you may bite the bullet and make your user an Administrator on the computer.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Guest]

Use a Scheduled task.

1. Create a scheduled task that runs each batch file.
2. Set the tasks to use the administrator's account info
3. Disable the tasks so they never runs automatically
4. Create a shortcut to the Scheduled Tasks folder in the All Users Desktop.
Ensure that Everyone or Domain Users has rights to open that folder.

The users can now open the Scheduled Tasks folder via the shortcut on the
desktop, right-click the germane task, and click "Run". The task will run,
using the administrator's rights.

The tradeoff here is the visibility of the Scheduled Tasks window to the
non-administrative users.