Microsoft KB Archive/254331

From BetaArchive Wiki
The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.
Knowledge Base


Some Local Computer Policy Administrative Templates Do Not Work Properly

Article ID: 254331

Article Last Modified on 2/28/2007



APPLIES TO

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional Edition



This article was previously published under Q254331


SYMPTOMS

After an administrator uses the Group Policy snap-in to configure a local computer policy and enable various user policies (such as allowing users to make network configuration changes) under the "Network and Dial-up Connections" administrative templates, the policy may not work.

For example, when a user logs on to a computer with such a policy applied, the user still may not be able to make network configuration changes.

CAUSE

This problem can occur if the user logs on to the computer with an account that does not have administrative privileges. The user interface (UI) prevents users who do not have administrative privileges from making network configuration changes (such as modifying a TCP/IP address).

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

MORE INFORMATION

Many of these policies require the ability to write to the registry to make changes; administrative privileges are required to accomplish this task.

The group policies in the Network and Dial-up Connections container are only for restricting access by Administrators to certain network properties. These policies have no effect on non-administrators. The explanations for the policies indicate that these policies affect only administrators.

Keywords: kbgpo kbprb KB254331