0

I have some Windows 10 PCs joined to a Samba4 domain,
so most users only have a limited Account.
I added the useres to the local Group 'Network Configuration Operators' so that they are allowed to change inteface settings like their IP-Address,
but when these users execute arp via cmd it says permisson denied.

These users have to be allowed to execute:

arp -d some.ip.address

How can i accomplish that?

4
  • 1
    You are going ot have to share more information about your domain configuration specifically what restrictions you have configured surrounding the configuration of their network adapters. Edit, your question, do not submit a comment
    – Ramhound
    Jun 7, 2017 at 15:24
  • Added some info, hopefully enough. If you need more info please be specific, i´m new to domains and don´t know which settings all exist.
    – W4rlock
    Jun 8, 2017 at 6:08
  • Network-Operators is a custom local user group that doesn't exist in a default installation of Windows.
    – Ramhound
    Jun 8, 2017 at 9:54
  • Not the exact name, it´s a german installation, changed the name again to maybe the proper name
    – W4rlock
    Jun 8, 2017 at 11:17

1 Answer 1

0

So the best solutions i have found:

When a user is in the Local Network Configuration Operators Group he is also allowed to use netsh or arp -d when the cmd shell is started as Admin, altough it is not a full admin shell it has evaluated permissons.
If you don´t want the UAC Password check you can login as admin and disable UAC, or create Scheduled Tasks with 'Execute with highest Permissons' and then run the task via cmd.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .