Enable/Disable Network Interfaces

Hello NG,

How can I allow a basic user to
enable or disable a network connection
(the network device/card)

If I put the user to the gorup
"Network Configuration Operators"
the user "has not enough rights"

And if I allow this by enable the
rights in "Local Security Policy"

Security Settings -> Local Policies
-> User Right Assigment
-> Load and unload device drivers

for "Network Configuration Operators"
or for the Basic User itself,
it will not work too (after the UAC
comes up, and typing the basic users
password -> not enough rights)

This is strange, because I allowed this
in "Local Security Policy"

How can I do this?
Thanks.

S

"Stefan Helmig" wrote:
> Hello NG,
>
> How can I allow a basic user to
> enable or disable a network connection
> (the network device/card)

Give that user a name and password for an admin account.
Otherwise, create a service to disable the connection by user request .

Regards,
--PA

> If I put the user to the gorup
> "Network Configuration Operators"
> the user "has not enough rights"
>
> And if I allow this by enable the
> rights in "Local Security Policy"
>
> Security Settings -> Local Policies
> -> User Right Assigment
> -> Load and unload device drivers
>
> for "Network Configuration Operators"
> or for the Basic User itself,
> it will not work too (after the UAC
> comes up, and typing the basic users
> password -> not enough rights)
>
> This is strange, because I allowed this
> in "Local Security Policy"
>
> How can I do this?
> Thanks.
>
> S
>
>

Hello Pavel,

"Pavel A." <pavel_a@NOwritemeNO.com> wrote in message news:7D20E8A5-F6F9-4CEB-AA40-57B3FF0E62F6@microsoft.com...

>> How can I allow a basic user to
>> enable or disable a network connection
>> (the network device/card)
>
> Give that user a name and password for an admin account.
> Otherwise, create a service to disable the connection by user request .

???
It sounds good, but I don't know how I do this.
Sorry, but the User already has a name and a password
I can't create the same Username with
Administror-Privileges ??? It's confusing

Example:

User FullName Desc. Priv./Group
user user ... Users
user user ... Administrators

???

And if this would work, the user has Administrator
Priveleges for the whole Computer - isn't it?

This is very confusing to me...
I hope you can explain it.

S

Hi Stephan,

I've meant that a non-admin user should know name & password of
The Administraror or other admin account in order to disable network
interfaces.
If this is not acceptable, and you can not make a service (daemon) running
with admin rights and doing this on the user's behalf, there is no [easy]
solution

For wireless adapters, non-admin users can disable radio from
the Mobility center, or use the hardware RF switch.
Of course this is not same as disabling the card.

Regards,
--PA


"Stefan Helmig" wrote:
> Hello Pavel,
>
> "Pavel A." <pavel_a@NOwritemeNO.com> wrote in message news:7D20E8A5-F6F9-4CEB-AA40-57B3FF0E62F6@microsoft.com...
>
> >> How can I allow a basic user to
> >> enable or disable a network connection
> >> (the network device/card)
> >
> > Give that user a name and password for an admin account.
> > Otherwise, create a service to disable the connection by user request .
>
> ???
> It sounds good, but I don't know how I do this.
> Sorry, but the User already has a name and a password
> I can't create the same Username with
> Administror-Privileges ??? It's confusing
>
> Example:
>
> User FullName Desc. Priv./Group
> user user ... Users
> user user ... Administrators
>
> ???
>
> And if this would work, the user has Administrator
> Priveleges for the whole Computer - isn't it?
>
> This is very confusing to me...
> I hope you can explain it.
>
> S
>