Re: Can't install local printer Group Policy?
From: Todd J Heron (todd_heron_no_spam_at_hotmail.com)
Date: 03/05/05
- Next message: ptwilliams: "Re: Firewall ports for AD domains in 2 different forests--SMS indi"
- Previous message: Todd J Heron: "Re: Corrupt SID"
- In reply to: Shane White: "Can't install local printer Group Policy?"
- Messages sorted by: [ date ] [ thread ]
Date: Sat, 5 Mar 2005 03:25:05 -0500
>I've started a new job as the network administrator, and I've noticed that
>all of my users cannot install a local printer. When they click "Add a
>printer" in Windows XP, the local printer option is grayed out. (They can
>install a network printer.)
Regular users cannot install local printers unless they are a Power User or
an Administrator on their machine. Regular users can only install network
printers.
>I'm assuming this is happening from our default domain group policy that is
>in effect.
No. It is happening based on default rights (specifically, the lack of).
>However, I looked under User Configuration -> Administrative Templates ->
>Control Panel -> Printers, but all items are "Not Configured."
Everything there is "Not Configured" by default.
>I can't seem to find any other areas that specifically talk about how a
>user interacts with printers.
You won't.
>I'd like to make it so all users can install any type of printer-- I don't
>want to lock down anything regarding printers. Any suggestions?
Create a CMD script and run it domain-wide against all your machines. The
CMD script can use the net local group command to add the domain users group
into the local Power Users group. Be aware this will give users not only
the right to add local printers but greater rights to install softwares and
the right to create shares on their machines and allow them to do
peer-to-peer file sharing, which is considered a security risk.
-- Todd J Heron, MCSE Windows Server 2003/2000/NT ---------------------------------------------------------------------------- Note: I do not top-post or bottom-post so that my responses are always easy to read in this forum and the Google Archives. This posting is provided "as is" with no warranties and confers no rights.
- Next message: ptwilliams: "Re: Firewall ports for AD domains in 2 different forests--SMS indi"
- Previous message: Todd J Heron: "Re: Corrupt SID"
- In reply to: Shane White: "Can't install local printer Group Policy?"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
