Re: Login script & network printers

From: Cary Shultz [A.D. MVP] (cwshultz_at_mvps.org)
Date: 01/31/05


Date: Mon, 31 Jan 2005 07:45:37 -0500

Not sure! I would need to work on this. AFAIK, users need to be at least
Power Users to install printers.

-- 
Cary W. Shultz
Roanoke, VA  24014
Microsoft Active Directory MVP
http://www.activedirectory-win2000.com
http://www.grouppolicy-win2000.com
"Ian Clark" <IanClark@discussions.microsoft.com> wrote in message 
news:D820736E-2A3C-4E72-840E-6B6D2D3CD23A@microsoft.com...
> Thanks. So is there not a way to allow them to install just printers as if 
> I
> give them power users it defeats my intention of preventing them from
> installing any software
>
> "Cary Shultz [A.D. MVP]" wrote:
>
>> Ian,
>>
>> Users need to be members of either the local Power Users or local
>> Administrators group to install Printers.  If they are simply members of 
>> the
>> local Users group ( the default ) then the will not be able to install
>> printers.
>>
>> You might want to look at the Restricted Groups GPO to make your domain 
>> user
>> account objects members of the local Power Users group.  However, be 
>> aware
>> of what this means ( access to more directories and registry areas,
>> installing more software, etc. ).
>>
>> -- 
>> Cary W. Shultz
>> Roanoke, VA  24014
>> Microsoft Active Directory MVP
>>
>> http://www.activedirectory-win2000.com
>> http://www.grouppolicy-win2000.com
>>
>>
>>
>> "Ian Clark" <IanClark@discussions.microsoft.com> wrote in message
>> news:F10E244A-78D0-450A-9B1F-BC7F6228E045@microsoft.com...
>> > Users login to our 2003 domain and run a logon script which maps 
>> > various
>> > network drives and network printers. However the printers dont map the
>> > first
>> > time the user logs in. Only works if i give there user account admin
>> > rights.
>> > Users are on XP machines. Not sure if its a local rights thing or not
>> > because
>> > I know normally a non-admin user on XP can install a network printer. 
>> > The
>> > script is set up as normal as logon.bat in the users account profile 
>> > tab
>> > in
>> > AD.
>> > Any help appreciated.
>> > -- 
>> > Ian
>> > Pragma Systems
>> > Aberdeen
>>
>>
>> 


Relevant Pages

  • Re: Login script & network printers
    ... Users need to be members of either the local Power Users or local ... Administrators group to install Printers. ...
    (microsoft.public.win2000.active_directory)
  • Re: Login script & network printers
    ... So is there not a way to allow them to install just printers as if I ... give them power users it defeats my intention of preventing them from ... > account objects members of the local Power Users group. ...
    (microsoft.public.win2000.active_directory)
  • Re: power users have too many rights
    ... If regular users could install printers then ... > My problem is that power users have too many rights. ...
    (microsoft.public.win2000.security)
  • Re: Program Installation
    ... Is there a reason to have your users as local power users? ... will prevent them from the ability to install most applications. ... "Anver" wrote in message ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Vista logon scripts - the never ending question
    ... scripts run if they were local power users? ... when people are local administrators, drive mappings are ... But if they're normal users can they install software? ...
    (microsoft.public.windows.group_policy)

Quantcast