Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

Server Series 18: how to grant domain user restricted network administrative rights through group policy?

2025-01-30 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Network Security >

Share

Shulou(Shulou.com)06/01 Report--

How to grant domain user restricted network administrative rights through group policy? To meet the requirements:

1. Give permissions to some domain users to create multi-user network connections (PPTP- × ×) or multi-user dial-up connections.

With regard to this requirement, the NCP group is used here. The NCP group can make it possible to make someone a member of the Network Configuration Operators group if you want to allow them to perform some network administration tasks, but do not want them to become administrators.

Before configuration:

When these domain accounts attempt to create an × × × connection shared by multiple users, the following information is prompted:

There are no restrictions on creation.

The prompt here requires an administrator password, which is not appropriate for ordinary domain users.

So what should be done before it can be done?

Let's talk about this:

Open the domain controller group policy and create a new GPO users

Right-click the restricted group and select add Group

Create a group

Add members and membership groups

Add NCP Group

Add domain users who need to be given limited network management rights

Restart the client to refresh the client group policy, and then create a multi-user shared network connection again to see if you have permissions

Prompted to enter administrative credentials here, you can see that there are two types, one is the domain administrator or the local administrator, and the other is the domain account that is now in use. We can just enter the current account directly.

Ok, we have successfully selected the multi-user option. (previously, there was no permission to select)

Ok, we can successfully create a multi-user shared × × connection here, that is, some domain users can configure network connections with restrictions.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Network Security

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report