How can I allow a non administrator domain user account to enable/disable network adapter.

I have many users in my company domain named as mycompany.org who are using Dell laptop with windows 7 professional. I am using Windows Server 2008 R2 as domain controller. On priority, my users need to enable / disable network adapter (its my organization requirement), but currently the system denies them this privilege without an administrator password. A prompt display every time to provide credentials. Is there a way to give them permission to enable / disable network adapter without any prompt. Step that I have already taken are:-

  1. My domain user named as student13 (with Window 7 professional installed in a laptop) is added in a group Network Configuration operator in Domain controller.

  2. In domain controller a GPO has been configured as:-
    Ability to enable/disable a LAN Connection  Enable

  3. The created GPO above linked to an OU that have the users who needs to enable / disable network adapter.

I believe what i need to do is make sure that my users should be the part of the Network Configuration Operators Group. This group enables my users to delegate the privileges that can manage the configuration of networking features.

I have done all the possible solutions but still my users face a problem to enable disable network adapter. A screen prompts to provide credentials appear every time. Kindly help me out.

10 Months
Discussion Span
Last Post by Ishtiaq_1

The principal user of a computer should (under most circumstances) be a member of the Administrator group for that PC (only) so they can do these things without a lot of futzing around.


"You're a programmer, Ishtiaq_1 !"

  • Hagrid.

Anyhow you could write a service that you send a message to and it does this for you on demand.
https://www.google.com/search?q=command+line+to+disable+a+device&ie=utf-8&oe=utf-8 finds it can be done via a command line so you as a programmer would craft a service that checks for say a message on schedule or event (your choice) and does the deed. That service would be given the rights to do that.

Such a large company must have a few programmers laying about.


You are rigth dear but my company need a scripts which shortcut would be available on every desktop to enable or disable network adapter only. i program a vb script it all works but when it executed a prompt appear that need administrative credentials. if i manually click on network adapter to disable or enable it again prompt me to provide password. is there any solution to permitt domain user to do such specific task. i have done all the steps which are mentioned in my question above.


This topic has been dead for over six months. Start a new discussion instead.
Have something to contribute to this discussion? Please be thoughtful, detailed and courteous, and be sure to adhere to our posting rules.