mitgliedschaft in der network configuration operators gruppe alleine reicht anscheinend nicht...
When this key is set to DWORD(1), the UI will be launched on desktops of users belonging to the Network Configuration Operators builtin group (S-1-5-32-556), with the following limitations for members of that group:
Configurations are stripped of all public, private, and pre-shared keys;
No version update notifications are delivered;
Adding, removing, editing, importing, or exporting configurations is forbidden; and
Quitting the manager is forbidden.
However, basic functionality such as starting and stopping tunnels remains intact.