SOLVED

Give AzureAD users rights to (only) change local network settings

%3CLINGO-SUB%20id%3D%22lingo-sub-1506221%22%20slang%3D%22en-US%22%3EGive%20users%20rights%20to%20(only)%20change%20local%20network%20settings%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1506221%22%20slang%3D%22en-US%22%3E%3CP%3EI%20don't%20want%20to%20give%20users%20local%20admin%20rights%2C%20like%20they%20had%20before%20Microsoft%20365%2C%20but%20there%20is%20only%20one%20problem.%20Some%20engineers%20need%20to%20change%20their%20network%20setting%20on%20there%20local%20machine%20from%20time%20to%20time.%20Is%20there%20a%20possibility%20to%20give%20them%20rights%20so%20they%20can%20only%20change%20network%20settings%2C%20instead%20of%20making%20them%20local%20admin%20again%3F%20If%20yes%2C%20how%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1506221%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAdmin%20center%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%20Administration%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%20Management%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1506245%22%20slang%3D%22en-US%22%3ERe%3A%20Give%20users%20rights%20to%20(only)%20change%20local%20network%20settings%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1506245%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F715411%22%20target%3D%22_blank%22%3E%40PMarcus%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMay%20be%20this%20works%20for%20you%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3Enet%20localgroup%20%22Network%20Configuration%20Operators%22%20%2Fadd%20%3CUSER%3E%3C%2FUSER%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EAnd%20make%20sure%20uac%20settings%20are%20correct%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3E%223%20(Default)%20%3D%20Prompt%20for%20credentials%22%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1533005%22%20slang%3D%22en-US%22%3ERe%3A%20Give%20AzureAD%20users%20rights%20to%20(only)%20change%20local%20network%20settings%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1533005%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F620702%22%20target%3D%22_blank%22%3E%40Rudy_Ooms%3C%2FA%3E%26nbsp%3BThis%20worked%20perfect!%20Just%20to%20be%20clear%20for%20following%20readers%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3EEnglish%3A%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%3CSPAN%3ENet%20localgroup%3C%2FSPAN%3E%26nbsp%3B%22Network%20Configuration%20Operators%22%20%2Fadd%20%22AzureAD%5Cname%40domain.com%22%3C%2FP%3E%3CP%3E%3CBR%20%2F%3E%3CSTRONG%3EDutch%3A%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%3CSPAN%3ENet%20localgroup%3C%2FSPAN%3E%26nbsp%3BNetwerkconfiguratieoperators%20%2Fadd%20%22AzureAD%5Cname%40domein.com%22%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

I don't want to give AzureAD users local admin rights, like they had before Microsoft 365, but there is only one problem. Some engineers need to change their network setting on there local machine from time to time. Is there a possibility to give them rights so they can only change network settings, instead of making them local admin again? If yes, how?

2 Replies
Highlighted

@PMarcus 

May be this works for you?

 

net localgroup "Network Configuration Operators" /add <user>

And make sure uac settings are correct

 

"3 (Default) = Prompt for credentials"

Highlighted
Solution

@Rudy_Ooms This worked perfect! Just to be clear for following readers:

 

English:

Net localgroup "Network Configuration Operators" /add "AzureAD\name@domain.com"


Dutch:

Net localgroup Netwerkconfiguratieoperators /add "AzureAD\name@domein.com"