Adding domain users to Network config Operators local group

[jkf1024]

We have a number of field technicians who need to be able to change the IP
configuration on their laptops. Rather than giving them admin rights on the
machines, I want to add them to the Network Configuration Operators local
group. I need to push this out with a domain group policy because there are
too many for us to log in remotely and change the settings on each laptop.

Our domain contains Windows 2000 and Windows 2003 servers. The domain
functional level is Windows 2000 native.

What I have done so far:
- Created a new GPO
- Under Computer Configuration > Windows Settings > Security Settings >
Restricted Groups, I added the group Network Configuration Operators.
- To this group I added a couple of test users.
- Created a child OU under the Workstations OU in our Active Directory
- Linked the GPO to the child OU

I log onto the a test computer in the child OU, using the credentials of one
of the test users. When I run gpresult, I can see that the policy was applied
yet the Network Configuration Operators group remains unpopulated.

Am I doing something wrong here?

Any advice would be appreciated. Thanks.

[Florian Frommherz [MVP]]

Post by jkf1024
We have a number of field technicians who need to be able to change the IP
configuration on their laptops. Rather than giving them admin rights on the
machines, I want to add them to the Network Configuration Operators local
group. I need to push this out with a domain group policy because there are
too many for us to log in remotely and change the settings on each laptop.
Our domain contains Windows 2000 and Windows 2003 servers. The domain
functional level is Windows 2000 native.
- Created a new GPO
- Under Computer Configuration > Windows Settings > Security Settings >
Restricted Groups, I added the group Network Configuration Operators.
- To this group I added a couple of test users.
- Created a child OU under the Workstations OU in our Active Directory
- Linked the GPO to the child OU
I log onto the a test computer in the child OU, using the credentials of one
of the test users. When I run gpresult, I can see that the policy was applied
yet the Network Configuration Operators group remains unpopulated.

Did it "recognize" the Network Operators group? Looking at the eventlog
of te machines, anything of interested in there?

You could, iirc, script that using a startup script:
net localgroup "Network Configuration Operators" "DOMAIN\UserName" /ADD

cheers,

Florian

[Meinolf Weber]

Hello jkf1024,

What operating system on the clients? If i am not totally wrong 2000 is not
supported with this. See also here: http://support.microsoft.com/kb/297938

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Post by jkf1024
We have a number of field technicians who need to be able to change
the IP configuration on their laptops. Rather than giving them admin
rights on the machines, I want to add them to the Network
Configuration Operators local group. I need to push this out with a
domain group policy because there are too many for us to log in
remotely and change the settings on each laptop.
Our domain contains Windows 2000 and Windows 2003 servers. The domain
functional level is Windows 2000 native.
- Created a new GPO
- Under Computer Configuration > Windows Settings > Security Settings
Restricted Groups, I added the group Network Configuration Operators.
- To this group I added a couple of test users.
- Created a child OU under the Workstations OU in our Active Directory
- Linked the GPO to the child OU
I log onto the a test computer in the child OU, using the credentials
of one of the test users. When I run gpresult, I can see that the
policy was applied yet the Network Configuration Operators group
remains unpopulated.
Am I doing something wrong here?
Any advice would be appreciated. Thanks.