Computer step by step
 Make your Pc better
Description:  

Determines whether Administrators and Network Configuration Operators can change the properties of
components used by a LAN connection.

This setting determines whether the Properties button for components of a LAN connection is enabled.

If you enable this setting (and enable the "Enable Network Connections settings for Administrators" setting),
the Properties button is disabled for Administrators. Network Configuration Operators are prohibited from
accessing connection components, regardless of the "Enable Network Connections settings for
Administrators" setting.

Important: If the "Enable Network Connections settings for Administrators" is disabled or not configured, this
setting does not apply to administrators on post-Windows 2000 computers.

If you disable this setting or do not configure it, the Properties button is enabled for administrators and
Network Configuration Operators.

The Local Area Connection Properties dialog box includes a list of the network components that the
connection uses. To view or change the properties of a component, click the name of the component, and
then click the Properties button beneath the component list.

Note: Not all network components have configurable properties. For components that are not configurable,
the Properties button is always disabled.

Note: When the "Prohibit access to properties of a LAN connection" setting is enabled, users are blocked
from accessing the Properties button for LAN connection components.

Note: Network Configuration Operators only have permission to change TCP/IP properties. Properties for all
other components are unavailable to these users.

Note: Nonadministrators are already prohibited from accessing properties of components for a LAN
connection, regardless of this setting.

Supported on: Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating
systems only.
Prohibit access to properties of components
of a LAN connection
Description Gpedit Regedit CMD Back VBScript PowerShell Script
Gpedit:   

Please perform the following steps:

Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here
Type gpedit.msc and press Enter
In the Group Policy window please navigate to User Configuration -> Administrative Templates ->
Network -> Network Connections and open Prohibit access to properties of components of a LAN
connection
.
Not Configured -> is the Default state
Enabled -> apply this GPO
Disabled -> this GPO will not be applied

To finish press ok button and close Group Policy window.
Type regedit and press ok
Please confirm User Account Control pop-up
Microsoft official disclaimer

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by
using another method. These problems might require that you reinstall the operating system. Microsoft
cannot guarantee that these problems can be solved. Modify the registry at your own risk.

Note: This registry key is created by Group Policy when this GPO is Enable. The GPO Default state is Not
Configured -> this registry entry is not present. For Disable this registry entry is not present.

Please navigate to HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Network Connections
and locate NC_LanChangeProperties registry key
Regedit:          

Please perform the following steps:

Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here
   
   
Double click on NC_LanChangeProperties and edit the value:

To Enable:
Change the data value with:
NC_LanChangeProperties = 0

To Disable:
Change the data value with:
NC_LanChangeProperties = 1

To finish press ok button and close Registry Editor window

Note: Manual editing of this registry key will not be reflected in Group Policy. If you modify this GPO from
Group Policy this registry key will be rewritten.
Type cmd, right click on cmd icon under the Programs and click on Run as administrator
Please confirm User Account Control pop-up
Please select, right and copy a registry key from below, then right click on command prompt window
, select Paste and press Enter

Enabled:
REG add "HKCU\Software\Policies\Microsoft\Windows\Network Connections" /v NC_LanChangeProperties /t REG_DWORD /d 0 /f

Disabled:
REG add "HKCU\Software\Policies\Microsoft\Windows\Network Connections" /v NC_LanChangeProperties /t REG_DWORD /d 1 /f

Not Configured:
REG DELETE "HKCU\Software\Policies\Microsoft\Windows\Network Connections" /v NC_LanChangeProperties /f

Note: Manual editing of this registry key will not be reflected in Group Policy. If you modify this GPO from
Group Policy this registry key will be rewritten.
CMD:          

Please perform the following steps:

Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here
   
VBScript:          

Const HKEY_CURRENT_USER = &H80000001
strComputer = "."
Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & _
strComputer & "\root\default:StdRegProv")

strKeyPath = "Software\Policies\Microsoft\Windows\Network Connections"
oReg.CreateKey HKEY_CURRENT_USER,strKeyPath
strValueName = "NC_LanChangeProperties"
'Enabled
dwValue = 0
'Disabled
'dwValue = 1
oReg.SetDWORDValue HKEY_CURRENT_USER,strKeyPath,strValueName,dwValue
'Not Configured
'oReg.DeleteValue HKEY_CURRENT_USER,strKeyPath,strValueName
   
PowerShell Script :          

Enabled

$RegKey = "HKCU:\Software\Policies\Microsoft\Windows"
If(Test-Path ($RegKey + "\Network Connections"))
{
 $RegKey = "HKCU:\Software\Policies\Microsoft\Windows\Network Connections"
  ##Enabled
  New-ItemProperty -path $RegKey -name NC_LanChangeProperties -value 0 -PropertyType DWord -Force
  ##Disabled
  ##New-ItemProperty -path $RegKey -name NC_LanChangeProperties -value 1 -PropertyType DWord -Force
}
else
{
 New-Item -path $RegKey -name "Network Connections"
 $RegKey = "HKCU:\Software\Policies\Microsoft\Windows\Network Connections"
  ##Enabled
  New-ItemProperty -path $RegKey -name NC_LanChangeProperties -value 0 -PropertyType DWord
  ##Disabled
  ##New-ItemProperty -path $RegKey -name NC_LanChangeProperties -value 1 -PropertyType DWord
}

Not Configured\Disabled

$RegKey = "HKCU:\Software\Policies\Microsoft\Windows"
Remove-ItemProperty -Path($RegKey + "\Network Connections") -name NC_LanChangeProperties
If( (Get-Item -Path($RegKey + "\Network Connections")).ValueCount -eq 0 -and (Get-Item -Path($RegKey + "\Network Connections")).SubKeyCount -eq 0)
{
 Remove-Item -Path($RegKey + "\Network Connections")  
}
   
Up Back
   
Result:

Need test pictures.
Verify code.
Result