Change policy for Firewall

Hi,

we have notebooks that are 80% of the time beneath a hard firewall and need
to exchange data between workstations (folder share necessary). The other 20%
of time this notebooks are used outside the office at any internet connection
where folder share isn´t necessary.
Theese notebook are not part of any Active Directory.
The users are all limited accounts (no administraors).
I need to give all users the right to activate/deactivate the Firewall to
suround the 2 possibilities (office/street).
I have not found what policy I have to change for this.

Any sugestion?

Thanks