Permitting commands to restricted users

[Mike]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

I need to permit the "restricted user" group to be able
to issue ipconfig /release and /renew commands. How do I
do this on a win2k pro box? In XP, there is a default
group called "network configuration operators" that
accomplishes this very easily, but no such luck in 2k.
Other commands are permitted in the XP group and that is
OK - the users can rename LAN connections, etc., but I
don't want to give restricted users elevated rights to
install software, disable hardware, etc.

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi Mike.

I know of no way to do that in W2K and I assume that is one reason for the
new network operators group in XP to accomadate that need. It would be
possible I suppose with a shorcut for ipconfig that includes the command
runas but an administrator's name and password would need to be stored in
cleartext on the computer and a savy user would probably be able to figure
that out through the shortcut. --- Steve


"Mike" <anonymous@discussions.microsoft.com> wrote in message
news:18ed301c44c15$9a628ab0$a101280a@phx.gbl...
> I need to permit the "restricted user" group to be able
> to issue ipconfig /release and /renew commands. How do I
> do this on a win2k pro box? In XP, there is a default
> group called "network configuration operators" that
> accomplishes this very easily, but no such luck in 2k.
> Other commands are permitted in the XP group and that is
> OK - the users can rename LAN connections, etc., but I
> don't want to give restricted users elevated rights to
> install software, disable hardware, etc.