How do i give domain users local network configuration operator rights..

hi,

 

i trying allow domain users ability able change network connections ie disable/enable etc seem having problems getting work , after hrs of trying advice have done..

 

from vista workstation using aduc , gpmc created ou inside created global security group added users/computers ou , created gpo , linked ou.. edited gpo , went computer>windows>restricted group , clikced bottom option group member of , typed in network configuration operators should put group in local nco group applied policy , went workstation , gupdate /force , rebooted workstations, logged on normal domain user account unable enableor disable card..

 

can tell me doing wrong have spent long time on , pull hair out..

 

thanks in advance

 

restricted groups - ok.

but use network configuration operators group instead of local admins. group has sufficient permissions modify network settings , enable/disable/configure widnows firewall.

the thing network configuration operators group not posses ability enable/disable network interface. although can allow them well, enabling them "user rights assignment" , right "load/unload device drivers" - right controls ability enable/disable nics.

o.

 

Windows Server  >  Security