You can use this procedure to delegate the ability to manage most aspects of a computer's network connectivity.
Many configuration restrictions that used to be applied by using Group Policy in earlier versions of Windows are now restricted. To create a connection that is shared by multiple users, or to make any configuration change that impacts a connection used by multiple users requires membership in either the Administrators or Network Configuration Operators group. A standard user can create new network connections, but can only save those connections for his or her own use. If you want to allow someone to perform the configuration tasks documented in this guide but not make them an Administrator, then you can make the user a member of the Network Configuration Operators group.
Membership in the local Administrators group, or equivalent, is the minimum required to complete this procedure.
To delegate network configuration permissions to a user
Start Computer Management by clicking Start, right-clicking Computer, and then clicking Manage.
In the navigation pane, navigate to Computer Management (Local)/Local Users and Groups/Groups.
In the details pane, double-click the Network Configuration Operators group.
Click the Add button, and then select the users or groups to whom you want to delegate permissions.
Additional considerations
-
Not all tasks in this guide can be performed by a member of the Network Configuration Operators group. Check each procedure for information about what group membership is required. If a procedure only indicates that Administrators can perform the task, then a member of the Network Configuration Operator group receives an error when trying to perform that task.
-
If a member of the Network Configuration Operators group attempts to perform an action that cannot be performed by a standard user, then the User Account Control dialog box appears. This dialog box presents user accounts that can perform the operation. Clicking a user name on the list and entering its password allows the operation to proceed by using those credentials. If the user's current account that is a member of the Network Configuration Operators group is not displayed, then that group cannot perform that operation.
See Also