Re: Local User allowed to install Printers

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Ken B (none_at_microsoft.com)
Date: 02/01/05 

Date: Tue, 1 Feb 2005 10:26:45 -0500

I don't think Windows would be able to handle that. What would stop the
user from attaching an mp3 player?... or other hardware not approved in your
environment? You'd be allowing a driver installation, but wanting to limit
driver installations. How often is it that you have a user installing a
local printer?

Ken

"RichieRich" <rsr2564@hotmail.com> wrote in message
news:OukBUlCCFHA.868@TK2MSFTNGP10.phx.gbl...
> That is correct. I have yet to see how you can have a domain user who is a
> member of the local users group be given explicit rights to install print
> drivers. Do you have a way to allow this and still keep the domain user a
> member of the local users group on the system?
>
> -thanks
>
>
>
> "Cary Shultz [A.D. MVP]" <cwshultz@mvps.org> wrote in message
> news:ODnr%23VACFHA.2608@TK2MSFTNGP10.phx.gbl...
>> A domain user account object that is a member of the local computers
>> Power
>> Users group will be able to install a printer...any printer to which
> he/she
>> has the appropriate permissions. However, the story changes if that
>> same
>> domain user account object is simply a member of the local computers
>> Users
>> group ( the default ).
>>
>> --
>> Cary W. Shultz
>> Roanoke, VA 24014
>> Microsoft Active Directory MVP
>>
>> http://www.activedirectory-win2000.com
>> http://www.grouppolicy-win2000.com
>>
>>
>>
>> "richierich" <rsr2564@hotmail.com> wrote in message
>> news:ejSo5K%23BFHA.3792@TK2MSFTNGP10.phx.gbl...
>> > How can I allow either a user or power user to install any printer they
>> > wish? I have done the load-unload-device-drivers and that did not
> work?
>> >
>> > -thanks
>> >
>>
>>
>
>

Relevant Pages

  • Re: Prevent user to install software
    ... >member of the computer's local Administrators group how ... >domain user account could be prevented from installing ... If your domain user account object is a member ... >assuming that you are trying to install software and are ...
    (microsoft.public.win2000.group_policy)
  • Re: Local User allowed to install Printers
    ... member of the local users group be given explicit rights to install print ... Do you have a way to allow this and still keep the domain user a ...
    (microsoft.public.win2000.group_policy)
  • Re: User Login
    ... the domain group called Domain Users is a member of the local Users group on all computers; this is usually why any domain user can logon at any domin member computer. ... Policies, User Rights Assignment, Deny log on locally - add the group containing the "email only" user accounts. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Re: Local User allowed to install Printers
    ... >member of the local users group be given explicit rights to install ... It depends on whether you are talking network printers or physical ...
    (microsoft.public.win2000.group_policy)
  • Re: User Rights in Domain
    ... I your domain user account objects need to be members of the local Power ... As a member of the local Power Users ... group they are able to install a lot of software. ... > current Domain Admin from that group, ...
    (microsoft.public.win2000.active_directory)