Prohibit adding and removing components for a LAN or remote access connection

Supported OS tags: Windows2000, WindowsServer2003, WindowsXP

Determines whether administrators can add and remove network components for a LAN or remote access connection. This setting has no effect on nonadministrators. If you enable this setting (and enable the "Enable Network Connections settings for Administrators" setting), the Install and Uninstall buttons for components of connections are disabled, and administrators are not permitted to access network components in the Windows Components Wizard. Important: If the "Enable Network Connections settings for Administrators" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers. If you disable this setting or do not configure it, the Install and Uninstall buttons for components of connections in the Network Connections folder are enabled. Also, administrators can gain access to network components in the Windows Components Wizard. The Install button opens the dialog boxes used to add network components. Clicking the Uninstall button removes the selected component in the components list (above the button). The Install and Uninstall buttons appear in the properties dialog box for connections. These buttons are on the General tab for LAN connections and on the Networking tab for remote access connections. Note: When the "Prohibit access to properties of a LAN connection", "Ability to change properties of an all user remote access connection", or "Prohibit changing properties of a private remote access connection" settings are set to deny access to the connection properties dialog box, the Install and Uninstall buttons for connections are blocked. Note: Nonadministrators are already prohibited from adding and removing connection components, regardless of this setting.

This policy has no additional user input fields.

• User
  Ability to change properties of an all user remote access connection

  At least Windows 2000 Service Pack 1
• User
  Ability to delete all user remote access connections

  Windows Server 2003, Windows XP, and Windows 2000 only
• User
  Ability to Enable/Disable a LAN connection

  Windows Server 2003, Windows XP, and Windows 2000 only
• User
  Ability to rename all user remote access connections

  Windows Server 2003, Windows XP, and Windows 2000 only
• User
  Ability to rename LAN connections

  Windows Server 2003, Windows XP, and Windows 2000 only
• User
  Ability to rename LAN connections or remote access connections available to all users

  Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only
• Computer
  Do not show the "local access only" network icon

  At least Windows Server 2008 R2 or Windows 7
• User
  Enable Windows 2000 Network Connections settings for Administrators

  Windows Server 2003 and Windows XP only
• User
  Prohibit access to properties of a LAN connection

  At least Windows 2000 Service Pack 1
• User
  Prohibit access to properties of components of a LAN connection

  Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only
• User
  Prohibit access to properties of components of a remote access connection

  Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only
• User
  Prohibit access to the Advanced Settings item on the Advanced menu

  Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only