Microsoft KB Archive/254331

From BetaArchive Wiki
Knowledge Base

Some Local Computer Policy Administrative Templates Do Not Work Properly

Article ID: 254331

Article Last Modified on 2/28/2007


  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional Edition

This article was previously published under Q254331


After an administrator uses the Group Policy snap-in to configure a local computer policy and enable various user policies (such as allowing users to make network configuration changes) under the "Network and Dial-up Connections" administrative templates, the policy may not work.

For example, when a user logs on to a computer with such a policy applied, the user still may not be able to make network configuration changes.


This problem can occur if the user logs on to the computer with an account that does not have administrative privileges. The user interface (UI) prevents users who do not have administrative privileges from making network configuration changes (such as modifying a TCP/IP address).


Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.


Many of these policies require the ability to write to the registry to make changes; administrative privileges are required to accomplish this task.

The group policies in the Network and Dial-up Connections container are only for restricting access by Administrators to certain network properties. These policies have no effect on non-administrators. The explanations for the policies indicate that these policies affect only administrators.

Keywords: kbgpo kbprb KB254331