How can i prohibit user with administrative rights from changing/accessing properties of network interface card like changing IP address etc. The user is connected to a network but not in a domain. Changes through policy editor is not working for users of administrators group. Thanks for any advice.

Hi, Since this is not a domain environment, it is unable to block prohibit this for administrators. If the computer has joined a domain, you can refer to this article Configure network connection restrictions with Group Policy to the access for local administrator. Thank you for your understanding. Regards Vincent Wang TechNet Community Support

Thank you for the reply. Actually in WinXP, users with admin rights can be prohibited from changing IP etc. through gpedit.msc or direct registry settings. But that does not work in Windows 7. Sometimes user in our environment who are not in domain inadvertently uses static ip address which sometimes create IP address conflict issues. Creating Standard user in Windows 7 PC solves the issue but at the same time takes away some rights from them like new software installations etc.

Hi, Please understand that the group policy is for Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only, so we could not disable it in Windows 7. So you need to let the users notice about the IP if they have the administrator rights. Thank you for your understanding. Regards Vincent Wang TechNet Community Support