question

ZacharyHamilton-4558 avatar image
0 Votes"
ZacharyHamilton-4558 asked CarlosEsquivel-7816 commented

How can a user change network adapter properties without admin permission?

Hello,

I have a user who needs to change his laptop IP address manually in order to access some equipment he is responsible for. He is not a local administrator on his laptop. I have added him to the "Network Configuration Operators" group, as well as "Device Owners" and "Power Users", and we have rebooted, but he is still unable to change his IP address. When he right-clicks the network adapter, the "Properties" option is grayed out.

My boss REALLY doesn't want to add him to the local "Administrators" group, but I'm about out of options. Does anyone have any thoughts?

Thanks,

Zachary Hamilton

windows-10-network
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,

Just checking in to see if the information provided was helpful.

If yes, you may accept useful reply as answer, if not, welcome to feedback.

Best Regards,
Sunny

0 Votes 0 ·
SunnyQi-MSFT avatar image
1 Vote"
SunnyQi-MSFT answered CarlosEsquivel-7816 commented

Hi,

Welcome to our new Q&A platform.

Based on my research, add the user to "Network Configuration Operators" group is a workaround.

May I know if the user was a domain user? If yes, please add the user in Active Directory Users and Computers.

Then please logon the local admin account of his laptop and add the user in Network Configuration Operators group. And now the user would have permission to update IP address.

I tested in my environment and it worked. Here is my lab result for your reference.

My account info:

14659-account-info.jpg

Add the user in Active Directory Users and Computers
14737-user-in-aduc.jpg

Logon the local admin account to add this user in Network Configuration Operators Properties.
14748-add-in-ncop.jpg

Log on this user and right click corresponded network adapter, enter the password of this user and then I can update my IP in Internet Protocol Version 4 (TCP/IPv4) properties.
14768-network-adapter-waring.jpg
14821-ipv4-settings.jpg


Hope my answer will help you. Thanks!
--please don't forget to Accept as answer if the reply is helpful--

Best Regards,
Sunny


account-info.jpg (22.6 KiB)
user-in-aduc.jpg (112.8 KiB)
add-in-ncop.jpg (37.2 KiB)
ipv4-settings.jpg (88.4 KiB)
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Excellent, thank you.

0 Votes 0 ·
ZacharyHamilton-4558 avatar image
0 Votes"
ZacharyHamilton-4558 answered

Hi Sunny,

Thanks for your response. Yes, it is a domain account. Unfortunately, that is what we have been doing and why I am confused as to what is going on. The user's domain account is a member of all the groups I mentioned, but "Properties" on the network adapter is still grayed out.

Thanks,

Zachary Hamilton

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SunnyQi-MSFT avatar image
0 Votes"
SunnyQi-MSFT answered SunnyQi-MSFT published

Hi,

Thanks for your reply.

May I know if you configure GPO to restrict domain user to change network settings, if yes, please remove the access required user to see if the issue can be resolved.

And I also found an article "How to configure GPO to allow Domain Users to change their IP address" for your reference.
https://community.cisco.com/legacyfs/online/legacy/2/1/0/24012-Domain%20Users-How%20to%20configure%20GPO%20to%20allow%20User%20Rights%20GPO%20to%20release-renew%20their%20IP%20address.pdf
Please Note: Since the websites are not hosted by Microsoft, the links may change without notice. Microsoft does not guarantee the accuracy of this information.

Based on my research, the problem may be with UAC. Please kindly check the value of "ConsentPromptBehaviorUser" in Registry Editor of windows 10 is 3.

If not please update the value to 3 to see if the issue can be resolved.

The value can be found here:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBehaviorUser

For more details please kindly refer to the following link:
https://www.tenforums.com/network-sharing/92533-network-configuration-operators-group-not-working.html
Please Note: Since the websites are not hosted by Microsoft, the links may change without notice. Microsoft does not guarantee the accuracy of this information.

Hope my answer will help you. Thanks!
--please don't forget to Accept as answer if the reply is helpful--

Best Regards,
Sunny

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SunnyQi-MSFT avatar image
0 Votes"
SunnyQi-MSFT answered SunnyQi-MSFT published

Hi,

Thanks for your reply.

May I know if you configure GPO to restrict domain user to change network settings, if yes, please remove the access required user to see if the issue can be resolved.

And I also found an article "How to configure GPO to allow Domain Users to change their IP address" for your reference.
https://community.cisco.com/legacyfs/online/legacy/2/1/0/24012-Domain%20Users-How%20to%20configure%20GPO%20to%20allow%20User%20Rights%20GPO%20to%20release-renew%20their%20IP%20address.pdf
Please Note: Since the websites are not hosted by Microsoft, the links may change without notice. Microsoft does not guarantee the accuracy of this information.

Based on my research, the problem may be with UAC. Please kindly check the value of "ConsentPromptBehaviorUser" in Registry Editor of windows 10 is 3.

If not please update the value to 3 to see if the issue can be resolved.

The value can be found here:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBehaviorUser

For more details please kindly refer to the following link:
https://www.tenforums.com/network-sharing/92533-network-configuration-operators-group-not-working.html
Please Note: Since the websites are not hosted by Microsoft, the links may change without notice. Microsoft does not guarantee the accuracy of this information.

Hope my answer will help you. Thanks!
--please don't forget to Accept as answer if the reply is helpful--

Best Regards,
Sunny

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.