Need help standard user network settings change without admin access

Change Users & Groups settings on Mac

• Standard: Standard users are set up by an administrator. Standard users can install apps and change their own settings, but can’t add other users or change other users’ settings.

sivasankar2 wrote:

Yes the device is managed by MDM. but i have asked the team they not restricted anything

Then as this computer is Managed by a MDM Service

There is really nothing more we can do about the Restrictions They have Placed on this setup

In effect, this is not an Apple Issue nor a macOS with the computer but rather the MDM Service issue

I use this script I wrote to allow standard users limited access to certain areas that would otherwise require admin. It needs to be deployed via MDM. It allows standard users to access the network pane, energy saver pane, printers pane, and date & time pane. Your admin would have to deploy this.

#!/bin/bash

# Unlock Network preference pane
security authorizationdb write system.preferences.network allow         
security authorizationdb write system.services.systemconfiguration.network allow

# Unlock Energy Saver preference pane
security authorizationdb write system.preferences.energysaver allow

# Unlock Print & Scan preference pane
security authorizationdb write system.preferences.printing allow

# Unlock Date & Time preference pane
security authorizationdb write system.preferences.datetime allow

# This must be set if you are going to allow non-admin access to any of the preference panes.
/usr/bin/security authorizationdb read system.preferences > /tmp/system.preferences.plist
/usr/bin/defaults write /tmp/system.preferences.plist group everyone
/usr/bin/defaults write /tmp/system.preferences.plist shared -bool true
/usr/bin/security authorizationdb write system.preferences < /tmp/system.preferences.plist

Is this computer in a Managed Environment and managed by a Mobile Digital Management service like iTunes or Jamf as examples ?

Yes. You need to run this via MDM for each user that logs in.

That would need to be configured via configuration profile.