I'm working in a small business and I am the administrator of the Active Directory using Windows Server 2012 R2 and Windows 7 machines. I want to create a user who can only access the CMD (find the MAC ADDRESS) and to be able change the IP(static) of the PC . All the other users are restricted and cannot access anything except the shares to access their files . I need this kind of user for my helper , in order to check their MAC addresses and then assign them Static IPs I will give him.


You can add the user to the local Network Configuration Operators group, which will allow them to modify TCP/IP settings on the computer without being an administrator.

You can use something like Group Policy Preferences or Restricted Groups GPOs to push this out across all relevant computers.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.