Home / server / Questions / 108800
In Process
Akash Kava
Asked: 2010-02-03 08:36:43 +0800 CST

How to disable Tcp/Ip settings in windows 7 via GPO?

  • 772

I have enabled following policies,

  • "Prohibit TCP/IP advanced connection"
  • "Prohibit access to properties of components of a LAN connection"
  • "Enable Windows 2000 Network Connections setings for Administrators"

after doing all these, all machines running windows xp, 2000 and vista have network settings properties button disabled as expected.

However all machines running windows 7 have no effect, I believe there are few more steps, all Windows 7 machines are on domain and we want to control this via Domain Controler's GPO.

Please let me know, what I need to do to have Windows 7 disable the properties of network connection, I am not network expert, I read few articles about what new has been added in GPO of windows 7 but I am blank.

Everything works fine on Windows XP, Vista, 2003 Server. Only Windows 7 is a problem.

active-directory windows-7 domain

4 Answers

  1. If I'm not mistaken, those settings are only applicable to W2KSP1, WinXP, and W2K3 computers. You need to enable the "Prohibit access to the properties of a LAN connection" setting, which should prohibit access to any properties of a LAN connection in Windows Vista and Windows 7.

    • 2

  2. I should be User Configuration/Administrative Templates/Network/Network Connections/"Prohibit access to properties of a LAN Connection" (since Windows 200 SP1). The problem I'm having with GP is that you are not sure if it got applied, so restarting is always a good idea.

    http://www.microsoft.com/downloads/details.aspx?familyid=18C90C80-8B0A-4906-A4F5-FF24CC2030FB&displaylang=en#filelist

    Besides that I would like to point out two things:

    1. Are your users local Administrators? Iirc even Power Users should not be able to configure LAN Adaptors...
    2. Consider upgrading to Windows Server 2008 R2
    • 1

  3. Although the button is not disabled you shouldn't be able to make any changes to the settings with these policies enforced - can you confirm that? If you really want to remove it from sight then you could use a registry modification.

    • 0

  4. I know this may seem wiered, did you also Enable the "Enable Windows 2000 Network Connections settings for Administrators" setting. Apply reverse psychology, although it applies to older OS's - admin rights an inherited. Of course all users are in the stipulated OU this GPO is applied to - give it a shot

    • 0