Microsoft KB Archive/254331

= Some Local Computer Policy Administrative Templates Do Not Work Properly =

Article ID: 254331

Article Last Modified on 2/28/2007

-

APPLIES TO


 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Professional Edition

-



This article was previously published under Q254331





SYMPTOMS
After an administrator uses the Group Policy snap-in to configure a local computer policy and enable various user policies (such as allowing users to make network configuration changes) under the "Network and Dial-up Connections" administrative templates, the policy may not work.

For example, when a user logs on to a computer with such a policy applied, the user still may not be able to make network configuration changes.



CAUSE
This problem can occur if the user logs on to the computer with an account that does not have administrative privileges. The user interface (UI) prevents users who do not have administrative privileges from making network configuration changes (such as modifying a TCP/IP address).



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.



MORE INFORMATION
Many of these policies require the ability to write to the registry to make changes; administrative privileges are required to accomplish this task.

The group policies in the Network and Dial-up Connections container are only for restricting access by Administrators to certain network properties. These policies have no effect on non-administrators. The explanations for the policies indicate that these policies affect only administrators.

Keywords: kbgpo kbprb KB254331

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.