Network Configuration Operators group doesnt work with new Win 11 GUI Settings.

Question

Ok so here is what is happning. I implemented LAPS in our enviroment, but because I work in an Engineering Company (PLC's Scadas etc), alot of our engineers needs to be able to change the IP on their laptops. So I added to the LAPS Group Policy the group Domain Users to be member of Network COnfiguration Operators.
When I go to ncpa.cpl with a non admin domain account I can right click on a adapter hit properties get prompted> add my user credentials and change the IP.
However when you go the Settings>Network & Internet> Advanced Network Settings>Expand an Adapter and hit View Additional properties > under IP Assignment you hit edit, then choose manual > check IPv4 and change the address,subnet mask DG DNS etc... and hit save it asks for Admin Credentials. It does not let you make the changes with an Domain User account who is member of Network Configuration Operators. If i give it LAPS Local Admin Creds it works.
If some one can help greatly appriciated. From what I understand is that an application is making the changes on your behalf and that application requests Admin Rights vs In Control Panel it asks which user is making the change and once you give your creds (Memeber of Net Conf Operators) It works.....

*** Moved from Windows / Windows 11 / Settings ***

Answer 1

Hello,

This symptom occurs by default for domain users of Network Configuration Operators because it requires administrator privileges when trying to access the properties of a network connection. You can try the following link to see if this can resolve the issue:

Prevent standard users from being prompt with UAC for basic tasks like task manager, event viewer, etc.. · GitHub

Best Regards

Zunhui

Answer 2

We've the same Problem for our customers here.

The provided link from ZunHui Han does not seem to fix the Problem here.

I can replicate the behavior with an local User:

If i add the local user to the "network configuration operators" group the user can change the ip-settings under ncpa.cpl, after entering his own credentials. under Settings>Network & Internet> and so on it isn't possible.

Actually our customers (also engineers) will work with that workaround.

But thats not satisfying for an standard user.

I would understand if windows behaves in an opposite way, because "normal" never will change drivers of networkadapters oder change LLDP drivers - but they need to be able to change IP-adresses quite easy.

Answer 3

Same problem, domain users.

Answer 4

This issue is still present. Is Microsoft planning on solving it?