I used to be able to do this using gpedit.msc, however now when I set "Enable Windows 2000 Network Connection setting for Administrators" to enable and then set "Prohibit access to properties of a LAN Connection" to enable and orthen set Prohibit access to properties of components of a LAN connections, nothing seems to impact the ability of members of the local administrators groups from changing the IP address of the LAN card. This is a stand alone, clean install of Windows 7 Ultimate 64bit...no domain or other cascading group policies conflicting. I really need to be able to get this done so of course any and all help will be appreciated. I don't understand why, if I am able to set these conditions in the Local Group Policy editor, why the don't work. Of course I have forced a gpupdate /force, I've logged off and on, I've rebooted. Just need some expert advice.