Comments on: Locking down network settings to local admins http://itknowledgeexchange.techtarget.com/itanswers/locking-down-network-settings-to-local-admins/ Sun, 26 May 2013 01:40:27 +0000 hourly 1 By: pjb0222 http://itknowledgeexchange.techtarget.com/itanswers/locking-down-network-settings-to-local-admins/#comment-94170 pjb0222 Tue, 12 Jul 2011 21:48:15 +0000 #comment-94170 The GPOs can prevent access to the Network Configuration Control Panels. A knowledgeable local admin will then simply use NETSH to configure the connections. You may also be able to deny them from running NETSH.

You simply cannot prevent a knowledgeable local admin from doing anything on a Windows system. Please note the “knowledgeable local admin” as most people are not knowledgeable enough to get around many items.

And all of your support people will need to be exempt so they can support your users.

Have you looked at event logging and monitoring to track people and actions?

]]> By: erroneousgiant http://itknowledgeexchange.techtarget.com/itanswers/locking-down-network-settings-to-local-admins/#comment-94143 erroneousgiant Tue, 12 Jul 2011 11:11:37 +0000 #comment-94143 Local admins will still have perms unless you remove local admins from the Domain Admins group. I wouldn’t do this though because if you ever have an issue with the client regarding network issues you need a local admin to be able to sort it out.

]]>