Policy
Ability to delete all user remote access connections
Windows 11 25H2
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows2000, WindowsServer2003, WindowsXP
Determines whether users can delete all user remote access connections. To create an all-user remote access connection, on the Connection Availability page in the New Connection Wizard, click the "For all users" option. If you enable this setting, all users can delete shared remote access connections. In addition, if your file system is NTFS, users need to have Write access to Documents and Settings\All Users\Application Data\Microsoft\Network\Connections\Pbk to delete a shared remote access connection. If you disable this setting (and enable the "Enable Network Connections settings for Administrators" setting), users (including administrators) cannot delete all-user remote access connections. (By default, users can still delete their private connections, but you can change the default by using the "Prohibit deletion of remote access connections" setting.) Important: If the "Enable Network Connections settings for Administrators" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers. If you do not configure this setting, only Administrators and Network Configuration Operators can delete all user remote access connections. Important: When enabled, the "Prohibit deletion of remote access connections" setting takes precedence over this setting. Users (including administrators) cannot delete any remote access connections, and this setting is ignored. Note: LAN connections are created and deleted automatically by the system when a LAN adapter is installed or removed. You cannot use the Network Connections folder to create or delete a LAN connection. Note: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting.
Registry values
How enabled and disabled states update the registry.
| Registry location | Type | Enabled value | Disabled value |
|---|---|---|---|
| HKCU\Software\Policies\Microsoft\Windows\Network Connections\NC_DeleteAllUserConnection | REG_DWORD | 1 | 0 |
Policy elements
Inputs and configuration options exposed by this policy.
This policy has no additional user input fields.
Other policies in this category
Explore related policies at the same level.
- UserAbility to change properties of an all user remote access connectionAt least Windows 2000 Service Pack 1
- UserAbility to Enable/Disable a LAN connectionWindows Server 2003, Windows XP, and Windows 2000 only
- UserAbility to rename all user remote access connectionsWindows Server 2003, Windows XP, and Windows 2000 only
- UserAbility to rename LAN connectionsWindows Server 2003, Windows XP, and Windows 2000 only
- UserAbility to rename LAN connections or remote access connections available to all usersMicrosoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only
- ComputerDo not show the "local access only" network iconAt least Windows Server 2008 R2 or Windows 7
- UserEnable Windows 2000 Network Connections settings for AdministratorsWindows Server 2003 and Windows XP only
- UserProhibit access to properties of a LAN connectionAt least Windows 2000 Service Pack 1
- UserProhibit access to properties of components of a LAN connectionMicrosoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only
- UserProhibit access to properties of components of a remote access connectionMicrosoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only
- UserProhibit access to the Advanced Settings item on the Advanced menuMicrosoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only
- UserProhibit access to the New Connection WizardMicrosoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only