Re: Policys for printers and errors in event viewer!

From: Alan Morris\(MSFT\) (alanmo_at_online.microsoft.com)
Date: 03/23/04 

Date: Tue, 23 Mar 2004 10:32:46 -0800

This policy is in affect on XP SP1 clients (and Server 2003 ). The Print
Operators Group pertains to domain printer queue administration. The policy
impacts installing a printer driver.

If you have an NT4 based domain, this policy will not work properly until
clients are XP with SP2.

If the driver is preinstalled on the client, then the user can connect. If
the driver exists in the client's driver.cab then the spooler will install
this driver rather than copy the driver from the server.

You can add the users to the Power Users group, and add the Load and unload
driver privilege to this group rather than give the users admin rights.

No clue on domain replication, I'm just a printer guy. 

-- 
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto
This posting is provided "AS IS" with no warranties, and confers no rights.
"Mike D" <anonymous@discussions.microsoft.com> wrote in message
news:ed3501c41081$db1ef040$a601280a@phx.gbl...
> Hello, I am currently setting up a new network and have
> just installed and shared a new HP network printer
> (Laserjet 4300 TN) onto the printserver using the jet
> direct software supplied.
>
> When I added it to my PC (I'm an administrator) it added
> and works fine. When I added it to a users computer it
> failed with the error 'A policy is in effect on your
> computer which prevents you from connecting to this print
> queue. Please contact you system administrator'.
>
> I found KB-319939 and this seemed to be similar, I enabled
> the policy.
>
> I then got the user to reboot and try again but got the
> same error when adding the printer. The user is in the
> Printer Operators group!
>
> I have since tried createing a new user, I logged in and
> added the printer and it worked?? but it still doesn't
> work for old users!!
>
> I have not got some more details from event viewer, the
> folling messages keep comming up!
>
> Event Type: Error
> Event Source: Userenv
> Event Category: None
> Event ID: 1053
> Date: 23/03/2004
> Time: 8:27:10 AM
> User: NT AUTHORITY\SYSTEM
> Computer: STEVES
> Description:
> Windows cannot determine the user or computer name. (The
> specified domain either does not exist or could not be
> contacted. ). Group Policy processing aborted.
>
> and
>
> Event Type: Error
> Event Source: AutoEnrollment
> Event Category: None
> Event ID: 15
> Date: 23/03/2004
> Time: 1:47:12 AM
> User: N/A
> Computer: STEVES
> Description:
> Automatic certificate enrollment for local system failed
> to contact the active directory (0x8007054b).  The
> specified domain either does not exist or could not be
> contacted.
>   Enrollment will not be performed.
>
> I have added these users to the administrators group for
> now to get them working but it's taking ages for the
> rights to replicate (4 hours now!) can I speed this up
> anyway? I've had them log of and on a few times!
>
> Help, thanks in advance.
>
> M
>

Relevant Pages

  • Re: Spoolsv.exe uses nearly100% CPU looking for unavailable print
    ... MCSE, CCEA, Microsoft MVP - Terminal Server ... suitable driver is not found. ... redirection policy is set to not configured by the way). ... Installing requisite drivers on the server resolves the ...
    (microsoft.public.windows.terminal_services)
  • Re: Must all users be administrators?
    ... The familiar look of the AD objects tree you see in Group Policy Editor is ... This seems modestly confusing to an SBS Administrator because there's very ... those rights happen to be nearly unlimited. ... sit a workstation logged on as the Local Administrator, by default, there ...
    (microsoft.public.windows.server.sbs)
  • Re: Windows CD cant find my hard drives.
    ... Two of them are in a RAID 0 array. ... To quit setup without installing Windows XP, ... driver floppy, it offered a selection of drivers for the RAID. ...
    (microsoft.public.windowsxp.general)
  • Re: The local policy of this system does not permit you to logon i
    ... Security policies were propagated with warning. ... Error 0x534 occurs when a user account in one or more Group Policy objects ... I have checked the security policies & the administrator profile is not ...
    (microsoft.public.windows.server.sbs)
  • Re: Explorer slow to find drives after Cameras installed
    ... Knowing that svchost.exe was the bug, as WIA is started from this, I seached ... This post hinted at a conflict or driver error of a device. ... After installing this ... The registry has been restored to its previous state before cleaning ...
    (microsoft.public.windowsxp.help_and_support)
Loading