What user right for turning network cards on/off in W2K Prof?

[Frank Bormann]

Hi,

I've got a Win2000 Professional machine with two network cards, LAN and WLAN.

I would like to allow ordinary users to turn them on and off at will, using
Control Panel->Network and Dial-up Connections->(Network
card)->Enable/Disable, without granting those user full local
administrative rights for the machine. Normally these controls are grayed
out when a user from the Users or Power Users group logs on.

I was wondering, what User Right I would have to grant in secpol.msc for
this to work. I've tried "Load/unload device drivers", but it didn't work.

Thanks in advance,
Frank

 

[Norbert Fehlauer [MVP]]

Frank Bormann wrote:
Hi,

I've got a Win2000 Professional machine with two network cards, LAN
and WLAN.

I would like to allow ordinary users to turn them on and off at will,
using Control Panel->Network and Dial-up Connections->(Network
card)->Enable/Disable, without granting those user full local
administrative rights for the machine. Normally these controls are
grayed out when a user from the Users or Power Users group logs on.

I was wondering, what User Right I would have to grant in secpol.msc
for this to work. I've tried "Load/unload device drivers", but it
didn't work.

In Windows 2000 you need Administrator rights. In XP there is the group of
networkoperators for this purpose.

Bye
Norbert

 

[Frank Bormann]

In Windows 2000 you need Administrator rights. In XP there is the group
of networkoperators for this purpose.

Hmm, so if I understand you correctly, besides the User Rights that can be
edited in secpol.msc, there are other (invisible) W2k group properties,
that can't be edited at all? Any registry patches perhaps?

Frank

 

[Norbert Fehlauer [MVP]]

Frank Bormann wrote:
Hi,

Hmm, so if I understand you correctly, besides the User Rights that
can be edited in secpol.msc, there are other (invisible) W2k group
properties, that can't be edited at all? Any registry patches perhaps?

I don't know, but I guess the networkoperators group in XP wasn't invented
for nothing.

Bye
Norbert

 

[Frank Bormann]

I don't know, but I guess the networkoperators group in XP wasn't
invented for nothing.

Could have been invented simply for the convenience not to have to fiddle
around with User Rights Management.

Too bad that it can't be done on W2K, but thanks anyway.

Frank