Hi All

I have a Win2k3 server setup at a school using AD/GPO to administer things.

I have two sets of users, pupils and teachers, and I've tried to lock things
down as much as possible really on both accounts where practical.

The problem I have is that the teachers want to use their laptops on their
networks (wireless and wired) at home and I therefore need to let them have
access to the network connections/configurations so that they can change
their ips, subnets, ssids, etc.

As a test I added network administrators to the staff's account (ie they
were network admins and domain users) and although they could get to the
network properties main window it wouldn't let them into the tcp/ip config
part to change stuff.

I don't want to make them domain admins as I believe this will allow them to
install and uninstall software (they always try and do this!!!) so is there
anyway round this?

I would have thought that assigning them as network admins would do the
trick, what else does a network admin need to do???, but is it possible that
another GPO param is stopping them from doing the job?

Thanks