Re: Login script & network printers

From: Ian Clark (IanClark_at_discussions.microsoft.com)
Date: 01/31/05 

Date: Mon, 31 Jan 2005 02:39:04 -0800

Thanks. So is there not a way to allow them to install just printers as if I
give them power users it defeats my intention of preventing them from
installing any software

"Cary Shultz [A.D. MVP]" wrote:

> Ian,
>
> Users need to be members of either the local Power Users or local
> Administrators group to install Printers. If they are simply members of the
> local Users group ( the default ) then the will not be able to install
> printers.
>
> You might want to look at the Restricted Groups GPO to make your domain user
> account objects members of the local Power Users group. However, be aware
> of what this means ( access to more directories and registry areas,
> installing more software, etc. ).
>
> --
> Cary W. Shultz
> Roanoke, VA 24014
> Microsoft Active Directory MVP
>
> http://www.activedirectory-win2000.com
> http://www.grouppolicy-win2000.com
>
>
>
> "Ian Clark" <IanClark@discussions.microsoft.com> wrote in message
> news:F10E244A-78D0-450A-9B1F-BC7F6228E045@microsoft.com...
> > Users login to our 2003 domain and run a logon script which maps various
> > network drives and network printers. However the printers dont map the
> > first
> > time the user logs in. Only works if i give there user account admin
> > rights.
> > Users are on XP machines. Not sure if its a local rights thing or not
> > because
> > I know normally a non-admin user on XP can install a network printer. The
> > script is set up as normal as logon.bat in the users account profile tab
> > in
> > AD.
> > Any help appreciated.
> > --
> > Ian
> > Pragma Systems
> > Aberdeen
>
>
>

Relevant Pages

  • Re: Login script & network printers
    ... Users need to be members of either the local Power Users or local ... Administrators group to install Printers. ...
    (microsoft.public.win2000.active_directory)
  • Re: Login script & network printers
    ... Power Users to install printers. ... >> account objects members of the local Power Users group. ...
    (microsoft.public.win2000.active_directory)
  • Re: power users have too many rights
    ... If regular users could install printers then ... > My problem is that power users have too many rights. ...
    (microsoft.public.win2000.security)
  • Re: Program Installation
    ... Is there a reason to have your users as local power users? ... will prevent them from the ability to install most applications. ... "Anver" wrote in message ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Vista logon scripts - the never ending question
    ... scripts run if they were local power users? ... when people are local administrators, drive mappings are ... But if they're normal users can they install software? ...
    (microsoft.public.windows.group_policy)
Quantcast