How can a user change network adapter properties without admin permission?

Question

Hello,

I have a user who needs to change his laptop IP address manually in order to access some equipment he is responsible for. He is not a local administrator on his laptop. I have added him to the "Network Configuration Operators" group, as well as "Device Owners" and "Power Users", and we have rebooted, but he is still unable to change his IP address. When he right-clicks the network adapter, the "Properties" option is grayed out.

My boss REALLY doesn't want to add him to the local "Administrators" group, but I'm about out of options. Does anyone have any thoughts?

Thanks,

Zachary Hamilton

Answer 1

Hi,

Welcome to our new Q&A platform.

Based on my research, add the user to "Network Configuration Operators" group is a workaround.

May I know if the user was a domain user? If yes, please add the user in Active Directory Users and Computers.

Then please logon the local admin account of his laptop and add the user in Network Configuration Operators group. And now the user would have permission to update IP address.

I tested in my environment and it worked. Here is my lab result for your reference.

My account info:

Add the user in Active Directory Users and Computers

Logon the local admin account to add this user in Network Configuration Operators Properties.

Log on this user and right click corresponded network adapter, enter the password of this user and then I can update my IP in Internet Protocol Version 4 (TCP/IPv4) properties.

Hope my answer will help you. Thanks!
--please don't forget to Accept as answer if the reply is helpful--

Best Regards,
Sunny

Answer 2

Hi Sunny,

Thanks for your response. Yes, it is a domain account. Unfortunately, that is what we have been doing and why I am confused as to what is going on. The user's domain account is a member of all the groups I mentioned, but "Properties" on the network adapter is still grayed out.

Thanks,

Zachary Hamilton

Answer 3

Hi,

Thanks for your reply.

May I know if you configure GPO to restrict domain user to change network settings, if yes, please remove the access required user to see if the issue can be resolved.

And I also found an article "How to configure GPO to allow Domain Users to change their IP address" for your reference.
https://community.cisco.com/legacyfs/online/legacy/2/1/0/24012-Domain%20Users-How%20to%20configure%20GPO%20to%20allow%20User%20Rights%20GPO%20to%20release-renew%20their%20IP%20address.pdf
Please Note: Since the websites are not hosted by Microsoft, the links may change without notice. Microsoft does not guarantee the accuracy of this information.

Based on my research, the problem may be with UAC. Please kindly check the value of "ConsentPromptBehaviorUser" in Registry Editor of windows 10 is 3.

If not please update the value to 3 to see if the issue can be resolved.

The value can be found here:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBehaviorUser

For more details please kindly refer to the following link:
https://www.tenforums.com/network-sharing/92533-network-configuration-operators-group-not-working.html
Please Note: Since the websites are not hosted by Microsoft, the links may change without notice. Microsoft does not guarantee the accuracy of this information.

Hope my answer will help you. Thanks!
--please don't forget to Accept as answer if the reply is helpful--

Best Regards,
Sunny

Answer 4

Hi,

Thanks for your reply.

May I know if you configure GPO to restrict domain user to change network settings, if yes, please remove the access required user to see if the issue can be resolved.

And I also found an article "How to configure GPO to allow Domain Users to change their IP address" for your reference.
https://community.cisco.com/legacyfs/online/legacy/2/1/0/24012-Domain%20Users-How%20to%20configure%20GPO%20to%20allow%20User%20Rights%20GPO%20to%20release-renew%20their%20IP%20address.pdf
Please Note: Since the websites are not hosted by Microsoft, the links may change without notice. Microsoft does not guarantee the accuracy of this information.

Based on my research, the problem may be with UAC. Please kindly check the value of "ConsentPromptBehaviorUser" in Registry Editor of windows 10 is 3.

If not please update the value to 3 to see if the issue can be resolved.

The value can be found here:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBehaviorUser

For more details please kindly refer to the following link:
https://www.tenforums.com/network-sharing/92533-network-configuration-operators-group-not-working.html
Please Note: Since the websites are not hosted by Microsoft, the links may change without notice. Microsoft does not guarantee the accuracy of this information.

Hope my answer will help you. Thanks!
--please don't forget to Accept as answer if the reply is helpful--

Best Regards,
Sunny