You are on page 1of 2

3/4/13

A Description of the Network Configuration Operators Group

Find it myself Ask the community Get live help

Select the product you need help with

Windows

Internet Explorer

Office

Surface

Xbox

Skype

Windows Phone

More products

A Description of the Network Configuration Operators Group


Article ID: 297938 - View products that this article applies to.

System Tip This article applies to a different version of Windows than the one you are using. Content in this article may not be relevant to you.
Visit the Windows 7 Solution Center

This article was previously published under Q297938

SUMMARY
This article describes the new built-in group called Network Configuration Operators. This group enables you to delegate the privileges that can manage the configuration of networking features. Things that members of this group can do include the following tasks: Modify the Transmission Control Protocol/Internet Protocol (TCP/IP) properties for a local area network (LAN) connection, which includes the IP address, the subnet mask, the default gateway, and the name servers. Rename the LAN connections or remote access connections that are available to all the users. Enable or disable a LAN connection. Modify the properties of all of remote access connections of the user. Delete all the remote access connections of the user. Rename all the remote access connections of the user. Issue ipconfig, release, or renew commands. Enter the PIN unblock key (PUK) for Mobile Broadband devices that support a SIM card. Note Members of this group cannot install a networking component.

MORE INFORMATION
To add a user to the Network Configuration Operators group, use either of the following methods. Note If a user is both a member of the Network Configuration Operators group and the Administrators group, the user cannot install any product that uses a Network Driver Interface Specification (NDIS) Intermediate Filter driver or Lightweight Filter driver. The failure is silent, that is, no error messages and no messages are logged to event logs or setupapi logs. Users should be either in the Network Configuration Operators group or the Administrators group, but not both groups.

Method 1: If the User Has a Domain Account


1. 2. 3. 4. 5. 6. In the Microsoft Management Console (MMC) snap-in, open Active Directory Users and Computers located in the Administration Tools folder. Expand the domain name in which the user account resides, and then click the Builtin item. In the right pane, double-click Network Configuration Operators. Click the Members tab, and then click Add. Enter the user to be added, and then click OK. Click OK to close the Network Configuration Operators Properties window.

Method 2: If the User Has a Local Account


1. 2. 3. 4. 5. 6. In the MMC snap-in, open Computer Management located in the Administration Tools folder. Expand the Local Users and Groups node, and then click Groups. In the right pane, double-click Network Configuration Operators. Click Add Enter the user to be added, and then click OK. Click OK to close the Network Configuration Operators Properties window.

Create a new network connection for all the users on the computer
In some scenarios, you need to create a new network connection for all the users on the computer. To do this, you need to apply the hotfixes that are

support.microsoft.com/kb/297938

1/2

3/4/13

A Description of the Network Configuration Operators Group


described in the following KB articles: 936129 (http://support.microsoft.com/kb/936129/ ) You cannot create a new network connection in Windows XP, even if you are using a user account that is a member of the Network Configuration Operators local group 909347 (http://support.microsoft.com/kb/909347/ ) Members of the Network Configuration Operators group cannot create a new connection for all users in Windows XP

Properties
Article ID: 297938 - Last Review: October 21, 2010 - Revision: 5.0 APPLIE S TO
Microsoft Windows XP Professional

K eywo r d s : kbenv kbinfo kbnetwork KB297938

Give Feedback
Back to the top

support.microsoft.com/kb/297938

2/2