SOLVED

Give AzureAD users rights to (only) change local network settings

Copper Contributor

I don't want to give AzureAD users local admin rights, like they had before Microsoft 365, but there is only one problem. Some engineers need to change their network setting on there local machine from time to time. Is there a possibility to give them rights so they can only change network settings, instead of making them local admin again? If yes, how?

2 Replies

@PMarcus 

May be this works for you?

 

net localgroup "Network Configuration Operators" /add <user>

And make sure uac settings are correct

 

"3 (Default) = Prompt for credentials"

best response confirmed by PMarcus (Copper Contributor)
Solution

@Rudy_Ooms_MVP This worked perfect! Just to be clear for following readers:

 

English:

Net localgroup "Network Configuration Operators" /add "AzureAD\name@domain.com"


Dutch:

Net localgroup Netwerkconfiguratieoperators /add "AzureAD\name@domein.com"

1 best response

Accepted Solutions
best response confirmed by PMarcus (Copper Contributor)
Solution

@Rudy_Ooms_MVP This worked perfect! Just to be clear for following readers:

 

English:

Net localgroup "Network Configuration Operators" /add "AzureAD\name@domain.com"


Dutch:

Net localgroup Netwerkconfiguratieoperators /add "AzureAD\name@domein.com"

View solution in original post