Locking down network settings to local admins

975 pts.
Tags:
IP address
Local Administrator Rights
Local Administrators Group
Network security
Network Security Management
How can the network settings be locked down even to local administrators. We track users based on IP and we don't want to compromise our results or skew them with people monkeying around.

Answer Wiki

Thanks. We'll let you know when a new response is added.

Group Policy is the best way, restrict what everyone except admins can edit, (often they can still see the settings but not change anything).

Discuss This Question: 2  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • ErroneousGiant
    Local admins will still have perms unless you remove local admins from the Domain Admins group. I wouldn't do this though because if you ever have an issue with the client regarding network issues you need a local admin to be able to sort it out.
    3,120 pointsBadges:
    report
  • Pjb0222
    The GPOs can prevent access to the Network Configuration Control Panels. A knowledgeable local admin will then simply use NETSH to configure the connections. You may also be able to deny them from running NETSH. You simply cannot prevent a knowledgeable local admin from doing anything on a Windows system. Please note the "knowledgeable local admin" as most people are not knowledgeable enough to get around many items. And all of your support people will need to be exempt so they can support your users. Have you looked at event logging and monitoring to track people and actions?
    3,310 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following