Blocking users from changing property settings in Windows 2000
I am trying to prevent users from changing the property settings in Windows 2000 (not Active Directory) and NT, of the network neighborhood. I don't want them changing the TCP/IP properties. I have looked in the system properties and local properties, but cannot locate a way to do this.
On a Windows 2000 computer, you can create a local group policy to restrict this setting. However, if users are administrators they can change the group policy setting back. Non-administrative users should be able to reconfigure TCP/IP anyways. To set group policy, open an mmc console and add the snap-in for local group policy. Then look in the user configurationadministrative templatesnetworknetwork and dial-up connections container.
On Windows NT, there are , I believe similar settings in Systems Policy (not systems settings). I do not have an NT computer on the network currently to provide you with the exact location. But, unlike group policy you will need to save the file to the logon directory to make it work. See this article on systems policy.
This was first published in November 2003