Computer step by step
 Make your Pc better
Description:  

Determines whether users can view and change the properties of components used by a private or all-user
remote access connection.

This setting determines whether the Properties button for components used by a private or all-user remote
access connection is enabled.

If you enable this setting (and enable the "Enable Network Connections settings for Administrators" setting),
the Properties button is disabled for all users (including administrators).

Important: If the "Enable Network Connections settings for Administrators" is disabled or not configured, this
setting does not apply to administrators on post-Windows 2000 computers.

If you disable this setting or do not configure it, the Properties button is enabled for all users.

The Networking tab of the Remote Access Connection Properties dialog box includes a list of the network
components that the connection uses. To view or change the properties of a component, click the name of
the component, and then click the Properties button beneath the component list.

Note: Not all network components have configurable properties. For components that are not configurable,
the Properties button is always disabled.

Note: When the "Ability to change properties of an all user remote access connection" or "Prohibit changing
properties of a private remote access connection" settings are set to deny access to the Remote Access
Connection Properties dialog box, the Properties button for remote access connection components is blocked.

Note: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass
this setting.

Supported on: Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating
systems only.
Prohibit access to properties of components
of a remote access connection
Description Gpedit Regedit CMD Back VBScript PowerShell Script
Gpedit:   

Please perform the following steps:

Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here
Type gpedit.msc and press Enter
In the Group Policy window please navigate to User Configuration -> Administrative Templates ->
Network -> Network Connections and open Prohibit access to properties of components of a remote
access connection
.
Not Configured -> is the Default state
Enabled -> apply this GPO
Disabled -> this GPO will not be applied

To finish press ok button and close Group Policy window.
Type regedit and press ok
Please confirm User Account Control pop-up
Microsoft official disclaimer

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by
using another method. These problems might require that you reinstall the operating system. Microsoft
cannot guarantee that these problems can be solved. Modify the registry at your own risk.

Note: This registry key is created by Group Policy when this GPO is Enable. The GPO Default state is Not
Configured -> this registry entry is not present. For Disable this registry entry is not present.

Please navigate to HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Network Connections
and locate NC_RasChangeProperties registry key
Regedit:          

Please perform the following steps:

Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here
   
   
Double click on NC_RasChangeProperties and edit the value:

To Enable:
Change the data value with:
NC_RasChangeProperties = 0

To Disable:
Change the data value with:
NC_RasChangeProperties = 1

To finish press ok button and close Registry Editor window

Note: Manual editing of this registry key will not be reflected in Group Policy. If you modify this GPO from
Group Policy this registry key will be rewritten.
Type cmd, right click on cmd icon under the Programs and click on Run as administrator
Please confirm User Account Control pop-up
Please select, right and copy a registry key from below, then right click on command prompt window
, select Paste and press Enter

Enabled:
REG add "HKCU\Software\Policies\Microsoft\Windows\Network Connections" /v NC_RasChangeProperties /t REG_DWORD /d 0 /f

Disabled:
REG add "HKCU\Software\Policies\Microsoft\Windows\Network Connections" /v NC_RasChangeProperties /t REG_DWORD /d 1 /f

Not Configured:
REG DELETE "HKCU\Software\Policies\Microsoft\Windows\Network Connections" /v NC_RasChangeProperties /f

Note: Manual editing of this registry key will not be reflected in Group Policy. If you modify this GPO from
Group Policy this registry key will be rewritten.
CMD:          

Please perform the following steps:

Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here
   
VBScript:          

Const HKEY_CURRENT_USER = &H80000001
strComputer = "."
Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & _
strComputer & "\root\default:StdRegProv")

strKeyPath = "Software\Policies\Microsoft\Windows\Network Connections"
oReg.CreateKey HKEY_CURRENT_USER,strKeyPath
strValueName = "NC_RasChangeProperties"
'Enabled
dwValue = 0
'Disabled
'dwValue = 1
oReg.SetDWORDValue HKEY_CURRENT_USER,strKeyPath,strValueName,dwValue
'Not Configured
'oReg.DeleteValue HKEY_CURRENT_USER,strKeyPath,strValueName
   
PowerShell Script :          

Enabled

$RegKey = "HKCU:\Software\Policies\Microsoft\Windows"
If(Test-Path ($RegKey + "\Network Connections"))
{
 $RegKey = "HKCU:\Software\Policies\Microsoft\Windows\Network Connections"
  ##Enabled
  New-ItemProperty -path $RegKey -name NC_RasChangeProperties -value 0 -PropertyType DWord -Force
  ##Disabled
  ##New-ItemProperty -path $RegKey -name NC_RasChangeProperties -value 1 -PropertyType DWord -Force
}
else
{
 New-Item -path $RegKey -name "Network Connections"
 $RegKey = "HKCU:\Software\Policies\Microsoft\Windows\Network Connections"
  ##Enabled
  New-ItemProperty -path $RegKey -name NC_RasChangeProperties -value 0 -PropertyType DWord
  ##Disabled
  ##New-ItemProperty -path $RegKey -name NC_RasChangeProperties -value 1 -PropertyType DWord
}

Not Configured\Disabled

$RegKey = "HKCU:\Software\Policies\Microsoft\Windows"
Remove-ItemProperty -Path($RegKey + "\Network Connections") -name NC_RasChangeProperties
If( (Get-Item -Path($RegKey + "\Network Connections")).ValueCount -eq 0 -and (Get-Item -Path($RegKey + "\Network Connections")).SubKeyCount -eq 0)
{
 Remove-Item -Path($RegKey + "\Network Connections")  
}
   
Up Back
   
Result:

Need test pictures.
Verify code.
Result