Re: Local User allowed to install Printers

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: RichieRich (rsr2564_at_hotmail.com)
Date: 02/01/05 

Date: Tue, 1 Feb 2005 01:43:27 -0500

That is correct. I have yet to see how you can have a domain user who is a
member of the local users group be given explicit rights to install print
drivers. Do you have a way to allow this and still keep the domain user a
member of the local users group on the system?

-thanks

"Cary Shultz [A.D. MVP]" <cwshultz@mvps.org> wrote in message
news:ODnr%23VACFHA.2608@TK2MSFTNGP10.phx.gbl...
> A domain user account object that is a member of the local computers Power
> Users group will be able to install a printer...any printer to which
he/she
> has the appropriate permissions. However, the story changes if that same
> domain user account object is simply a member of the local computers Users
> group ( the default ).
>
> --
> Cary W. Shultz
> Roanoke, VA 24014
> Microsoft Active Directory MVP
>
> http://www.activedirectory-win2000.com
> http://www.grouppolicy-win2000.com
>
>
>
> "richierich" <rsr2564@hotmail.com> wrote in message
> news:ejSo5K%23BFHA.3792@TK2MSFTNGP10.phx.gbl...
> > How can I allow either a user or power user to install any printer they
> > wish? I have done the load-unload-device-drivers and that did not
work?
> >
> > -thanks
> >
>
>

Relevant Pages

  • Re: Local User allowed to install Printers
    ... > member of the local users group be given explicit rights to install print ... Do you have a way to allow this and still keep the domain user a ...
    (microsoft.public.win2000.group_policy)
  • Re: User Login
    ... the domain group called Domain Users is a member of the local Users group on all computers; this is usually why any domain user can logon at any domin member computer. ... Policies, User Rights Assignment, Deny log on locally - add the group containing the "email only" user accounts. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Prevent user to install software
    ... >member of the computer's local Administrators group how ... >domain user account could be prevented from installing ... If your domain user account object is a member ... >assuming that you are trying to install software and are ...
    (microsoft.public.win2000.group_policy)
  • Re: Domain user to local administrators group
    ... I need a VB Script for adding domain users to be a member of local ... new member) objects, so I am sure they exist and I have the correct ADsPath. ... ' Bind to the local administrators group object on the computer. ... ' Bind to the user or group object, in this case a domain user. ...
    (microsoft.public.windows.server.scripting)
  • Re: Default domain permissions
    ... BTW - the user account in question is a member of domain users ONLY. ... >> Checking everyone group and domain user group permissions on ... >> I have searched high and low for what the default domain user ... > Visit Topic URL to contact author (reg. ...
    (microsoft.public.win2000.security)