windows native VPN client - can we turn off "local admin permission" request

Question

corporate user , when needs to access VPN, using native windows VPN client, it will request "local admin permission". by right, user wasn't supposed to be given "local admin rights", as user wasn't allow to download or install any applications, under corporate policy.
however, for VPN user, it seems unable to avoid. how do we "block" the local admin rights for VPN user?

Answer 1

Hello @[Esther Lee]

Users need to have admin permission to alter the routing tables, so they can access VPN.

Or you could add the user to Network Configuration Operators group.

It gives the user the ability to change RouteTables, Create or enable Network Connections (this happens when connecting to the VPN) etc.

Best Regards
Karlie

----------

If the Answer is helpful, please click "Accept Answer" and upvote it.