A Description of the Network Configuration Operators Group

Support for Windows XP has ended

Microsoft ended support for Windows XP on April 8, 2014. This change has affected your software updates and security options. Learn what this means for you and how to stay protected.

This article has been archived. It is offered "as is" and will no longer be updated.
Summary
This article describes the new built-in group called Network Configuration Operators. This group enables you to delegate the privileges that can manage the configuration of networking features. Things that members of this group can do include the following tasks: 
  • Modify the Transmission Control Protocol/Internet Protocol (TCP/IP) properties for a local area network (LAN) connection, which includes the IP address, the subnet mask, the default gateway, and the name servers.
  • Rename the LAN connections or remote access connections that are available to all the users.
  • Enable or disable a LAN connection.
  • Modify the properties of all of remote access connections of the user.
  • Delete all the remote access connections of the user.
  • Rename all the remote access connections of the user.
  • Issue ipconfig, release, or renew commands.
  • Enter the PIN unblock key (PUK) for Mobile Broadband devices that support a SIM card.
Note Members of this group cannot install a networking component.
More information
To add a user to the Network Configuration Operators group, use either of the following methods.

Note If a user is both a member of the Network Configuration Operators group and the Administrators group, the user cannot install any product that uses a Network Driver Interface Specification (NDIS) Intermediate Filter driver or Lightweight Filter driver. The failure is silent, that is, no error messages and no messages are logged to event logs or setupapi logs. Users should be either in the Network Configuration Operators group or the Administrators group, but not both groups.

Method 1: If the User Has a Domain Account

  1. In the Microsoft Management Console (MMC) snap-in, open Active Directory Users and Computers located in the Administration Tools folder.
  2. Expand the domain name in which the user account resides, and then click the Builtin item.
  3. In the right pane, double-click Network Configuration Operators.
  4. Click the Members tab, and then click Add.
  5. Enter the user to be added, and then click OK.
  6. Click OK to close the Network Configuration Operators Properties window.

Method 2: If the User Has a Local Account

  1. In the MMC snap-in, open Computer Management located in the Administration Tools folder.
  2. Expand the Local Users and Groups node, and then click Groups.
  3. In the right pane, double-click Network Configuration Operators.
  4. Click Add
  5. Enter the user to be added, and then click OK.
  6. Click OK to close the Network Configuration Operators Properties window.

Create a new network connection for all the users on the computer

In some scenarios, you need to create a new network connection for all the users on the computer. To do this, you need to apply the hotfixes that are described in the following KB articles:
936129 You cannot create a new network connection in Windows XP, even if you are using a user account that is a member of the Network Configuration Operators local group
909347 Members of the Network Configuration Operators group cannot create a new connection for all users in Windows XP
Properties

Article ID: 297938 - Last Review: 12/06/2015 02:30:37 - Revision: 6.0

Microsoft Windows XP Professional

  • kbnosurvey kbarchive kbenv kbinfo kbnetwork KB297938
Feedback