Category: Microsoft Windows Server 2003 Windows XP and Windows 2000 Service Pack 1 operating systems only
Prohibit viewing of status for an active connection
Determines whether users can view the status for an active connection. Connection status is available from the connection status taskbar icon or from the Status dialog box. The Status dialog box displays information about the connection and its activity. It also provides buttons to disconnect and to configure the properties of the connection. If you enable this setting the connection status taskbar icon and Status dialog box are not available to users (including administrators). The Status option is disabled in the context menu for the connection and on the File menu in the Network Connections folder. Users cannot choose to show the connection icon in the taskbar from the Connection Properties dialog box. Important: If the “Enable Network Connections settings for Administrators” is disabled or not configured this setting will not apply to administrators on post-Windows 2000 computers. If you disable this setting or do not configure it the connection status taskbar icon and Status dialog box are available to all users.
Prohibit use of Internet Connection Sharing on your DNS domain network
Determines whether administrators can enable and configure the Internet Connection Sharing (ICS) feature of an Internet connection and if the ICS service can run on the computer. ICS lets administrators configure their system as an Internet gateway for a small network and provides network services such as name resolution and addressing through DHCP to the local private network. If you enable this setting ICS cannot be enabled or configured by administrators and the ICS service cannot run on the computer. The Advanced tab in the Properties dialog box for a LAN or remote access connection is removed. The Internet Connection Sharing page is removed from the New Connection Wizard. The Network Setup Wizard is disabled. If you disable this setting or do not configure it and have two or more connections administrators can enable ICS. The Advanced tab in the properties dialog box for a LAN or remote access connection is available. In addition the user is presented with the option to enable Internet Connection Sharing in the Network Setup Wizard and Make New Connection Wizard. (The Network Setup Wizard is available only in Windows XP Professional. )By default ICS is disabled when you create a remote access connection but administrators can use the Advanced tab to enable it. When running the New Connection Wizard or Network Setup Wizard administrators can choose to enable ICS. Note: Internet Connection Sharing is only available when two or more network connections are present. Note: When the “Prohibit access to properties of a LAN connection” “Ability to change properties of an all user remote access connection” or “Prohibit changing properties of a private remote access connection” settings are set to deny access to the Connection Properties dialog box the Advanced tab for the connection is blocked. Note: Nonadministrators are already prohibited from configuring Internet Connection Sharing regardless of this setting. Note: Disabling this setting does not prevent Wireless Hosted Networking from using the ICS service for DHCP services. To prevent the ICS service from running on the Network Permissions tab in the network’s policy properties select the “Don’t use hosted networks” check box.
Ability to rename LAN connections or remote access connections available to all users
Determines whether users can rename LAN or all user remote access connections. If you enable this setting the Rename option is enabled for all users. Users can rename connections by clicking the icon representing a connection or by using the File menu. If you disable this setting (and enable the “Enable Network Connections settings for Administrators” setting) the Rename option for LAN and all user remote access connections is disabled for all users (including Administrators and Network Configuration Operators). Important: If the “Enable Network Connections settings for Administrators” is disabled or not configured this setting will not apply to administrators on post-Windows 2000 computers. If this setting is not configured only Administrators and Network Configuration Operators have the right to rename LAN or all user remote access connections. Note: When configured this setting always takes precedence over the “Ability to rename LAN connections” and “Ability to rename all user remote access connections” settings. Note: This setting does not prevent users from using other programs such as Internet Explorer to rename remote access connections.
Prohibit access to properties of components of a remote access connection
Determines whether users can view and change the properties of components used by a private or all-user remote access connection. This setting determines whether the Properties button for components used by a private or all-user remote access connection is enabled. If you enable this setting (and enable the “Enable Network Connections settings for Administrators” setting) the Properties button is disabled for all users (including administrators). Important: If the “Enable Network Connections settings for Administrators” is disabled or not configured this setting does not apply to administrators on post-Windows 2000 computers. If you disable this setting or do not configure it the Properties button is enabled for all users. The Networking tab of the Remote Access Connection Properties dialog box includes a list of the network components that the connection uses. To view or change the properties of a component click the name of the component and then click the Properties button beneath the component list. Note: Not all network components have configurable properties. For components that are not configurable the Properties button is always disabled. Note: When the “Ability to change properties of an all user remote access connection” or “Prohibit changing properties of a private remote access connection” settings are set to deny access to the Remote Access Connection Properties dialog box the Properties button for remote access connection components is blocked. Note: This setting does not prevent users from using other programs such as Internet Explorer to bypass this setting.
Prohibit access to the New Connection Wizard
Determines whether users can use the New Connection Wizard which creates new network connections. If you enable this setting (and enable the “Enable Network Connections settings for Administrators” setting) the Make New Connection icon does not appear in the Start Menu on in the Network Connections folder. As a result users (including administrators) cannot start the New Connection Wizard. Important: If the “Enable Network Connections settings for Administrators” is disabled or not configured this setting will not apply to administrators on post-Windows 2000 computers. If you disable this setting or do not configure it the Make New Connection icon appears in the Start menu and in the Network Connections folder for all users. Clicking the Make New Connection icon starts the New Connection Wizard. Note: Changing this setting from Enabled to Not Configured does not restore the Make New Connection icon until the user logs off or on. When other changes to this setting are applied the icon does not appear or disappear in the Network Connections folder until the folder is refreshed. Note: This setting does not prevent users from using other programs such as Internet Explorer to bypass this setting.
Prohibit access to properties of components of a LAN connection
Determines whether Administrators and Network Configuration Operators can change the properties of components used by a LAN connection. This setting determines whether the Properties button for components of a LAN connection is enabled. If you enable this setting (and enable the “Enable Network Connections settings for Administrators” setting) the Properties button is disabled for Administrators. Network Configuration Operators are prohibited from accessing connection components regardless of the “Enable Network Connections settings for Administrators” setting. Important: If the “Enable Network Connections settings for Administrators” is disabled or not configured this setting does not apply to administrators on post-Windows 2000 computers. If you disable this setting or do not configure it the Properties button is enabled for administrators and Network Configuration Operators. The Local Area Connection Properties dialog box includes a list of the network components that the connection uses. To view or change the properties of a component click the name of the component and then click the Properties button beneath the component list. Note: Not all network components have configurable properties. For components that are not configurable the Properties button is always disabled. Note: When the “Prohibit access to properties of a LAN connection” setting is enabled users are blocked from accessing the Properties button for LAN connection components. Note: Network Configuration Operators only have permission to change TCP/IP properties. Properties for all other components are unavailable to these users. Note: Nonadministrators are already prohibited from accessing properties of components for a LAN connection regardless of this setting.
Prohibit Enabling/Disabling components of a LAN connection
Determines whether administrators can enable and disable the components used by LAN connections. If you enable this setting (and enable the “Enable Network Connections settings for Administrators” setting) the check boxes for enabling and disabling components are disabled. As a result administrators cannot enable or disable the components that a connection uses. Important: If the “Enable Network Connections settings for Administrators” is disabled or not configured this setting will not apply to administrators on post-Windows 2000 computers. If you disable this setting or do not configure it the Properties dialog box for a connection includes a check box beside the name of each component that the connection uses. Selecting the check box enables the component and clearing the check box disables the component. Note: When the “Prohibit access to properties of a LAN connection” setting is enabled users are blocked from accessing the check boxes for enabling and disabling the components of a LAN connection. Note: Nonadministrators are already prohibited from enabling or disabling components for a LAN connection regardless of this setting.
Prohibit TCP/IP advanced configuration
Determines whether users can configure advanced TCP/IP settings. If you enable this setting (and enable the “Enable Network Connections settings for Administrators” setting) the Advanced button on the Internet Protocol (TCP/IP) Properties dialog box is disabled for all users (including administrators). As a result users cannot open the Advanced TCP/IP Settings Properties page and modify IP settings such as DNS and WINS server information. Important: If the “Enable Network Connections settings for Administrators” is disabled or not configured this setting will not apply to administrators on post-Windows 2000 computers. If you disable this setting the Advanced button is enabled and all users can open the Advanced TCP/IP Setting dialog box. Note: This setting is superseded by settings that prohibit access to properties of connections or connection components. When these policies are set to deny access to the connection properties dialog box or Properties button for connection components users cannot gain access to the Advanced button for TCP/IP configuration. Note: Nonadministrators (excluding Network Configuration Operators) do not have permission to access TCP/IP advanced configuration for a LAN connection regardless of this setting. Tip: To open the Advanced TCP/IP Setting dialog box in the Network Connections folder right-click a connection icon and click Properties. For remote access connections click the Networking tab. In the “Components checked are used by this connection” box click Internet Protocol (TCP/IP) click the Properties button and then click the Advanced button. Note: Changing this setting from Enabled to Not Configured does not enable the Advanced button until the user logs off.
Prohibit access to the Advanced Settings item on the Advanced menu
Determines whether the Advanced Settings item on the Advanced menu in Network Connections is enabled for administrators. The Advanced Settings item lets users view and change bindings and view and change the order in which the computer accesses connections network providers and print providers. If you enable this setting (and enable the “Enable Network Connections settings for Administrators” setting) the Advanced Settings item is disabled for administrators. Important: If the “Enable Network Connections settings for Administrators” is disabled or not configured this setting will not apply to administrators on post-Windows 2000 computers. If you disable this setting or do not configure it the Advanced Settings item is enabled for administrators. Note: Nonadministrators are already prohibited from accessing the Advanced Settings dialog box regardless of this setting.
Prohibit adding and removing components for a LAN or remote access connection
Determines whether administrators can add and remove network components for a LAN or remote access connection. This setting has no effect on nonadministrators. If you enable this setting (and enable the “Enable Network Connections settings for Administrators” setting) the Install and Uninstall buttons for components of connections are disabled and administrators are not permitted to access network components in the Windows Components Wizard. Important: If the “Enable Network Connections settings for Administrators” is disabled or not configured this setting will not apply to administrators on post-Windows 2000 computers. If you disable this setting or do not configure it the Install and Uninstall buttons for components of connections in the Network Connections folder are enabled. Also administrators can gain access to network components in the Windows Components Wizard. The Install button opens the dialog boxes used to add network components. Clicking the Uninstall button removes the selected component in the components list (above the button). The Install and Uninstall buttons appear in the properties dialog box for connections. These buttons are on the General tab for LAN connections and on the Networking tab for remote access connections. Note: When the “Prohibit access to properties of a LAN connection” “Ability to change properties of an all user remote access connection” or “Prohibit changing properties of a private remote access connection” settings are set to deny access to the connection properties dialog box the Install and Uninstall buttons for connections are blocked. Note: Nonadministrators are already prohibited from adding and removing connection components regardless of this setting.