Computer step by step
 Make your Pc better
Description:  

Determines whether users can configure advanced TCP/IP settings.

If you enable this setting (and enable the "Enable Network Connections settings for Administrators" setting),
the Advanced button on the Internet Protocol (TCP/IP) Properties dialog box is disabled for all users
(including administrators). As a result, users cannot open the Advanced TCP/IP Settings Properties page and
modify IP settings, such as DNS and WINS server information.

Important: If the "Enable Network Connections settings for Administrators" is disabled or not configured, this
setting will not apply to administrators on post-Windows 2000 computers.

If you disable this setting, the Advanced button is enabled, and all users can open the Advanced TCP/IP
Setting dialog box.

Note: This setting is superseded by settings that prohibit access to properties of connections or connection
components. When these policies are set to deny access to the connection properties dialog box or
Properties button for connection components, users cannot gain access to the Advanced button for TCP/IP
configuration.

Note: Nonadministrators (excluding Network Configuration Operators) do not have permission to access
TCP/IP advanced configuration for a LAN connection, regardless of this setting.

Tip: To open the Advanced TCP/IP Setting dialog box, in the Network Connections folder, right-click a
connection icon, and click Properties. For remote access connections, click the Networking tab.  In the
"Components checked are used by this connection" box, click Internet Protocol (TCP/IP), click the Properties
button, and then click the Advanced button.

Note: Changing this setting from Enabled to Not Configured does not enable the Advanced button until the
user logs off.

Supported on: Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating
systems only.
Prohibit TCP/IP advanced configuration
Description Gpedit Regedit CMD Back VBScript PowerShell Script
Gpedit:   

Please perform the following steps:

Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here
Type gpedit.msc and press Enter
In the Group Policy window please navigate to User Configuration -> Administrative Templates ->
Network -> Network Connections and open Prohibit TCP/IP advanced configuration.
Not Configured -> is the Default state
Enabled -> apply this GPO
Disabled -> this GPO will not be applied

To finish press ok button and close Group Policy window.
Type regedit and press ok
Please confirm User Account Control pop-up
Microsoft official disclaimer

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by
using another method. These problems might require that you reinstall the operating system. Microsoft
cannot guarantee that these problems can be solved. Modify the registry at your own risk.

Note: This registry key is created by Group Policy when this GPO is Enable. The GPO Default state is Not
Configured -> this registry entry is not present. For Disable this registry entry is not present.

Please navigate to HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Network Connections
and locate NC_AllowAdvancedTCPIPConfig registry key
Regedit:          

Please perform the following steps:

Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here
   
   
Double click on NC_AllowAdvancedTCPIPConfig and edit the value:

To Enable:
Change the data value with:
NC_AllowAdvancedTCPIPConfig = 0

To Disable:
Change the data value with:
NC_AllowAdvancedTCPIPConfig = 1

To finish press ok button and close Registry Editor window

Note: Manual editing of this registry key will not be reflected in Group Policy. If you modify this GPO from
Group Policy this registry key will be rewritten.
Type cmd, right click on cmd icon under the Programs and click on Run as administrator
Please confirm User Account Control pop-up
Please select, right and copy a registry key from below, then right click on command prompt window
, select Paste and press Enter

Enabled:
REG add "HKCU\Software\Policies\Microsoft\Windows\Network Connections" /v NC_AllowAdvancedTCPIPConfig /t REG_DWORD /d 0 /f

Disabled:
REG add "HKCU\Software\Policies\Microsoft\Windows\Network Connections" /v NC_AllowAdvancedTCPIPConfig /t REG_DWORD /d 1 /f

Not Configured:
REG DELETE "HKCU\Software\Policies\Microsoft\Windows\Network Connections" /v NC_AllowAdvancedTCPIPConfig /f

Note: Manual editing of this registry key will not be reflected in Group Policy. If you modify this GPO from
Group Policy this registry key will be rewritten.
CMD:          

Please perform the following steps:

Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here
   
VBScript:          

Const HKEY_CURRENT_USER = &H80000001
strComputer = "."
Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & _
strComputer & "\root\default:StdRegProv")

strKeyPath = "Software\Policies\Microsoft\Windows\Network Connections"
oReg.CreateKey HKEY_CURRENT_USER,strKeyPath
strValueName = "NC_AllowAdvancedTCPIPConfig"
'Enabled
dwValue = 0
'Disabled
'dwValue = 1
oReg.SetDWORDValue HKEY_CURRENT_USER,strKeyPath,strValueName,dwValue
'Not Configured
'oReg.DeleteValue HKEY_CURRENT_USER,strKeyPath,strValueName
   
PowerShell Script :          

Enabled

$RegKey = "HKCU:\Software\Policies\Microsoft\Windows"
If(Test-Path ($RegKey + "\Network Connections"))
{
 $RegKey = "HKCU:\Software\Policies\Microsoft\Windows\Network Connections"
  ##Enabled
  New-ItemProperty -path $RegKey -name NC_AllowAdvancedTCPIPConfig -value 0 -PropertyType DWord -Force
  ##Disabled
  ##New-ItemProperty -path $RegKey -name NC_AllowAdvancedTCPIPConfig -value 1 -PropertyType DWord -Force
}
else
{
 New-Item -path $RegKey -name "Network Connections"
 $RegKey = "HKCU:\Software\Policies\Microsoft\Windows\Network Connections"
  ##Enabled
  New-ItemProperty -path $RegKey -name NC_AllowAdvancedTCPIPConfig -value 0 -PropertyType DWord
  ##Disabled
  ##New-ItemProperty -path $RegKey -name NC_AllowAdvancedTCPIPConfig -value 1 -PropertyType DWord
}

Not Configured\Disabled

$RegKey = "HKCU:\Software\Policies\Microsoft\Windows"
Remove-ItemProperty -Path($RegKey + "\Network Connections") -name NC_AllowAdvancedTCPIPConfig
If( (Get-Item -Path($RegKey + "\Network Connections")).ValueCount -eq 0 -and (Get-Item -Path($RegKey + "\Network Connections")).SubKeyCount -eq 0)
{
 Remove-Item -Path($RegKey + "\Network Connections")  
}
   
Up Back
   
Result:

Need test pictures.
Verify code.
Result