Changing IP From Standard User

Hello Everyone,

I have been googling this problem for a while now, and I cannot see an anwser online.

I teach CCNA to students, the only thing they need to do is to change the IP address of the machine to match the various IP addresses during the course.

Ideally I will lock down the other parts of the OS using Group Policy Objects so they cannot disrupt the running of the OS.

One of the steps I come accross was to add the user to the 'Network Configuration Operators' group. However the UAC asks for a password when I change IP address, and then disallows the user from progressing.

The PC's have no password assigned while I am in the testng phase (this may affect UAC).

All the PC's are on a peer-to-peer so no AD or server to deal with.

I am running Windows 7 Pro 32-Bit on all the machines.

Such a simple problem is making me lose my hair!

It's not possible. Changing the IP address (as well as many other network configurations) is a system-wide change, and therefore requires administrator access. Allowing standard users to change it would mean that anyone can tamper with the network, disrupt connectivity or setup malicious activities. Either give them admin access or they can't do it.

However, this is a prime use case for a virtual machine. Just install a preconfigured VM and give it to the students to toy with, including full admin access there (but NOT to the host). After the class you just restore them to known-good points and throw away every change.

It's normal n these cases to run deep freeze or similar with that users can delete all windows if they want but any changes are gone on reboot that way they can be admins and on reboot it's back to normal for next class

AddRAM said:

Teach them to create an Admin account on their PC`s, run your course, then have them remove the Admin account.

But creating another user account requires in itself another administrator account, which sort of defeats the point. I would still use a VM, or at least, reimage the computer after each class. It's not only a matter of deleting user accounts, any other changes must be reversed so that the next group can again solve the same problems.

With deep freeze no need to reimage as it reverts back to default even if infected and files deleted on reboot

samuria said:

With deep freeze no need to reimage as it reverts back to default even if infected and files deleted on reboot

DeepFreeze IS an image! Automatically restored on each boot and taken with a different method, but it fundamentally is an image.

Hello guys and girls for your replies.

I would ideally use VM's for teaching, however due to my teaching environment this is not possible. I also need to maintain a high level of security on the PC's. Hence I do not wish to allow admin access, again due to my environment.

I know the nature of std user means admin access is not allowed. However there are programs that can elevate the privillages. Also the Network Operation Configuration group should allow someone to change in address Use the Network Configuration Operators group ... although a restart would be needed (hence not using deep freeze). Another problem with deep freeze is that it requires a yearly license. I can convince my employer for a one off fee, but an on going license is harder to convince them.

AddRAM said:

We used Norton Ghost, great software.

But we installed a new OS everyday anyway.

Anyway ......

Teach them to create an Admin account on their PC`s, run your course, then have them remove the Admin account.

Not sure why a teacher is having any problems here.

AddRAM I have no idea why you are coming across as hostile in your answers / replies. Allot comes down to my teaching environment being challenging, more so than your average classroom which adds further complications.

There are lots of software and configuration out there, we cannot know them all. I certainly do not know everything, and I am always open to learning.