Article ID: 297938 - View products that this article applies to.
Expand all | Collapse all

On This Page

Summary

This article describes the new built-in group called Network Configuration Operators. This group enables you to delegate the privileges that can manage the configuration of networking features. Things that members of this group can do include the following tasks: 
  • Modify the Transmission Control Protocol/Internet Protocol (TCP/IP) properties for a local area network (LAN) connection, which includes the IP address, the subnet mask, the default gateway, and the name servers.
  • Rename the LAN connections or remote access connections that are available to all the users.
  • Enable or disable a LAN connection.
  • Modify the properties of all of remote access connections of the user.
  • Delete all the remote access connections of the user.
  • Rename all the remote access connections of the user.
  • Issue ipconfig, release, or renew commands.
  • Enter the PIN unblock key (PUK) for Mobile Broadband devices that support a SIM card.
Note Members of this group cannot install a networking component.

More information

To add a user to the Network Configuration Operators group, use either of the following methods.

Note If a user is both a member of the Network Configuration Operators group and the Administrators group, the user cannot install any product that uses a Network Driver Interface Specification (NDIS) Intermediate Filter driver or Lightweight Filter driver. The failure is silent, that is, no error messages and no messages are logged to event logs or setupapi logs. Users should be either in the Network Configuration Operators group or the Administrators group, but not both groups.

Method 1: If the User Has a Domain Account

  1. In the Microsoft Management Console (MMC) snap-in, open Active Directory Users and Computers located in the Administration Tools folder.
  2. Expand the domain name in which the user account resides, and then click the Builtin item.
  3. In the right pane, double-click Network Configuration Operators.
  4. Click the Members tab, and then click Add.
  5. Enter the user to be added, and then click OK.
  6. Click OK to close the Network Configuration Operators Properties window.

Method 2: If the User Has a Local Account

  1. In the MMC snap-in, open Computer Management located in the Administration Tools folder.
  2. Expand the Local Users and Groups node, and then click Groups.
  3. In the right pane, double-click Network Configuration Operators.
  4. Click Add
  5. Enter the user to be added, and then click OK.
  6. Click OK to close the Network Configuration Operators Properties window.

Create a new network connection for all the users on the computer

In some scenarios, you need to create a new network connection for all the users on the computer. To do this, you need to apply the hotfixes that are described in the following KB articles:
936129 You cannot create a new network connection in Windows XP, even if you are using a user account that is a member of the Network Configuration Operators local group
909347 Members of the Network Configuration Operators group cannot create a new connection for all users in Windows XP

Properties

Article ID: 297938 - Last Review: June 19, 2014 - Revision: 6.0
Applies to
  • Microsoft Windows XP Professional
Keywords: 
kbenv kbinfo kbnetwork KB297938

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com