Creating a local admin account with limited permissions

Question

Is it possible to create a local admin account that only has the right to change network adapter settings? I need a local user to be able to change its IP address by entering local admin credentials when prompted. I thought about creating a local account and changing it to an admin account, then creating a local group policy in MMC and applying it to the user. However, I'm not sure how to limit the admin account's permissions since changing the local user to local admin gives it all the admin rights automatically.

Answer 1

Hi,

In general, we use local user group to manage user account permission. For users within administrator group means they have full permissions. I am afraid that we are unable to restrict the permission for administrator.

You may consider adding a general local account to Network Configuration Operators group. Or we may consider domain user with domain policy configuration to restrict the account permission.