[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ntsecurity
Subject:    =?iso-8859-1?Q?R=E9f._:_RE:_[NTSEC]_NT_Workstation_Users/Administ?=
From:       sever.lazarovici () ca-indosuez ! com
Date:       2000-03-24 9:33:28
[Download RAW message or body]


TO UNSUBSCRIBE: email "unsubscribe ntsecurity" to majordomo@iss.net
Contact ntsecurity-owner@iss.net for help with any problems!
---------------------------------------------------------------------------



I don't think there is a good ideea to make 'Everyone' member of the local
Administrators group.
Is enough to make members of local Administrators group, only the users that are
log on that station.
So they can change the IP address.

Maybe you can look again under User Manager: 'Policies-User Rights', and try
some others
Administrators specific rights, like 'Load and unload device drivers' or 'Modify
the
environment firmware values' or others.

I hope will be useful

Sever LAZAROVICI
Network Administrator,
CA-Indosuez, France



We had similar issues here and ended up adding an 'Everyone' domain group to
the local Administrators group on the NT workstations. This gives our users
the ability to set their time, time zone, install printers, etc. (It should
also give access to TCP/IP properties)

You may have already thought of this but I thought I would pass it on.

Phil Burch
Network Administrator
Oralis.com - The online supplier to oral healthcare professionals.

We are hiring the best and brightest.  Please see our job openings at:
http://www.oralis.com/


-----Original Message-----
From: Coffey, R. Brendan [mailto:BCoffey@ola.state.md.us]
Sent: Wednesday, March 22, 2000 1:37 PM
To: ntsecurity@iss.net
Subject: [NTSEC] NT Workstation Users/Administrators



TO UNSUBSCRIBE: email "unsubscribe ntsecurity" to majordomo@iss.net
Contact ntsecurity-owner@iss.net for help with any problems!
---------------------------------------------------------------------------

I'm not sure if this is considered a NT Security issue per se but I'll never
know unless I ask it.

We use NT Workstation 4.0.  I need to give our Users group the ability to
change the IP addresses of their remote machines.  Currently NT Workstation
only gives the Administrators group the ability to change IP Addresses.  I
need them to be able to change their IP address without having all the
additional privileges that the Administrators group would give them. I tried
looking under User Manager: 'Policies-User Rights' but there is no specific
'Right' regarding IP Address change capability.  Is there a way to create a
User right and then assign it to which ever groups need it?

Thanks, Brendan Coffey.

Sorry If this isn't classified as 'NT Security.'  But I've looked all over
the place trying to find out.

[prev in list] [next in list] [prev in thread] [next in thread]