A Description of the Network Configuration Operators Group

This article describes the new built-in group called Network Configuration Operators. This group enables you to delegate the privileges that can manage the configuration of networking features. The members of that group have the ability to:

• Modify the Transmission Control Protocol/Internet Protocol (TCP/IP) properties for a local area network (LAN) connection, which includes the IP address, the subnet mask, the default gateway, and the name servers.
• Rename the LAN connections or remote access connections that are available to all of the users.
• Enable or disable a LAN connection.
• Modify the properties of all of the remote access connections of the user.
• Delete all of the remote access connections of the user.
• Rename all of the remote access connections of the user.
• Issue ipconfig, release, or renew commands.

To add a user to the Network Configuration Operators group, use either of the following methods.

Method 1: If the User Has a Domain Account

1. In the Microsoft Management Console (MMC) snap-in, open Active Directory Users and Computers located in the Administration Tools folder.
2. Expand the domain name in which the user account resides, and then click the Builtin item.
3. In the right pane, double-click Network Configuration Operators.
4. Click the Members tab, and then click Add.
5. Enter the user to be added, and then click OK.
6. Click OK to close the Network Configuration Operators Properties window.

Method 2: If the User Has a Local Account

1. In the MMC snap-in, open Computer Management located in the Administration Tools folder.
2. Expand the Local Users and Groups node, and then click Groups.
3. In the right pane, double-click Network Configuration Operators.
4. Click Add
5. Enter the user to be added, and then click OK.
6. Click OK to close the Network Configuration Operators Properties window.

Create a new network connection for all the users on the computer

In some scenarios, you need to create a new network connection for all the users on the computer. To do this, you need to apply the hotfixes that are described in the following KB articles: