I have installed a VPN client on a Windows XP laptop in a Windows 2003
domain. I want non-administrator users of that laptop to be able to
use the VPN. However, when I activate the VPN client as a
non-privileged user, it fails. The problem has to do with the fact
that the user has no privilege to access the VPN adapter.

I have given "Authenticated Users" Full Control on the VPN *service*
using the Security Configuration and Analysis MMC snap-in, however, I
see nothing in any tool (SCA, GPO, User Rights, etc.) which allows me
to give the user control of a *device*. Am I missing something? I've
looked all over the net and the only answer people seem to be able to
give is "Make them admin". That really isn't the answer I'm looking
for.

Thanks for any help you can give me.

When you create a network connection for a VPN you are given the option to
configure it just for yourself or all users. If you did not select all users
you may want to remove it and install it again selecting all users to see if
that helps. Otherwise you could try adding the user to the Network
Configuration Operators local group on the computer but then that user will
be able to modify TCP/IP configuration for all adapters on the
omputer. --- Steve


"Joe Account" <cpriester@gmail.com> wrote in message
news:1130784945.925978.264770@g43g2000cwa.googlegr oups.com...
>I have installed a VPN client on a Windows XP laptop in a Windows 2003
> domain. I want non-administrator users of that laptop to be able to
> use the VPN. However, when I activate the VPN client as a
> non-privileged user, it fails. The problem has to do with the fact
> that the user has no privilege to access the VPN adapter.
>
> I have given "Authenticated Users" Full Control on the VPN *service*
> using the Security Configuration and Analysis MMC snap-in, however, I
> see nothing in any tool (SCA, GPO, User Rights, etc.) which allows me
> to give the user control of a *device*. Am I missing something? I've
> looked all over the net and the only answer people seem to be able to
> give is "Make them admin". That really isn't the answer I'm looking
> for.
>
> Thanks for any help you can give me.
>