How to hide or prevent users from changing dns settings

[strike101]

I'm not on a domain , just local homegroup network , and i want to prevent users from changing the DNS settings from the network settings , i'm using OpenDNS to block certain websites , and they sometimes changes to other public dns servers

 

[strike101]

or if it exist is there any Local policies that can hide or prevent users from changing the primary and secondary DNS servers ?

 

[Modelworks]

go to command prompt and type gpedit
under user configuration, administrative templates, network , network connections

You can disable access to lan setting there.

 

[Nothinman]

Why not just make them a restricted user?

 

[strike101]

@modelworks already did that but i can still open/access/change the settings

@Nothinman there are certain programs that need full administritive access

 

[Modelworks]

Originally posted by: strike101
@modelworks already did that but i can still open/access/change the settings

@Nothinman there are certain programs that need full administritive access

=
You can set up user accounts with limited access or you can let them change the DNS settings when they want to . You can't lock out the admin from the network settings, that would be locking the door and throwing away the key.

 

[Goosemaster]

editing LSP (comp/user)using gpedit is great for this

 

[Nothinman]

@Nothinman there are certain programs that need full administritive access

Are you sure? Have you looked through filemon/regmon to see what they really need access to?

 

[gsellis]

Work with your HR, Info Security policy holders and make it corporate policy not to change network settings.