Prohibit TCP/IP advanced configuration

Supported OS tags: Windows2000, WindowsServer2003, WindowsXP

Determines whether users can configure advanced TCP/IP settings. If you enable this setting (and enable the "Enable Network Connections settings for Administrators" setting), the Advanced button on the Internet Protocol (TCP/IP) Properties dialog box is disabled for all users (including administrators). As a result, users cannot open the Advanced TCP/IP Settings Properties page and modify IP settings, such as DNS and WINS server information. Important: If the "Enable Network Connections settings for Administrators" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers. If you disable this setting, the Advanced button is enabled, and all users can open the Advanced TCP/IP Setting dialog box. Note: This setting is superseded by settings that prohibit access to properties of connections or connection components. When these policies are set to deny access to the connection properties dialog box or Properties button for connection components, users cannot gain access to the Advanced button for TCP/IP configuration. Note: Nonadministrators (excluding Network Configuration Operators) do not have permission to access TCP/IP advanced configuration for a LAN connection, regardless of this setting. Tip: To open the Advanced TCP/IP Setting dialog box, in the Network Connections folder, right-click a connection icon, and click Properties. For remote access connections, click the Networking tab. In the "Components checked are used by this connection" box, click Internet Protocol (TCP/IP), click the Properties button, and then click the Advanced button. Note: Changing this setting from Enabled to Not Configured does not enable the Advanced button until the user logs off.

This policy has no additional user input fields.

• User
  Ability to change properties of an all user remote access connection

  At least Windows 2000 Service Pack 1
• User
  Ability to delete all user remote access connections

  Windows Server 2003, Windows XP, and Windows 2000 only
• User
  Ability to Enable/Disable a LAN connection

  Windows Server 2003, Windows XP, and Windows 2000 only
• User
  Ability to rename all user remote access connections

  Windows Server 2003, Windows XP, and Windows 2000 only
• User
  Ability to rename LAN connections

  Windows Server 2003, Windows XP, and Windows 2000 only
• User
  Ability to rename LAN connections or remote access connections available to all users

  Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only
• Computer
  Do not show the "local access only" network icon

  At least Windows Server 2008 R2 or Windows 7
• User
  Enable Windows 2000 Network Connections settings for Administrators

  Windows Server 2003 and Windows XP only
• User
  Prohibit access to properties of a LAN connection

  At least Windows 2000 Service Pack 1
• User
  Prohibit access to properties of components of a LAN connection

  Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only
• User
  Prohibit access to properties of components of a remote access connection

  Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only
• User
  Prohibit access to the Advanced Settings item on the Advanced menu

  Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only