RE: Users adding printers

In an ideal world Id like all users to be able to see the printers that are
shared from the server. I dont fancy having to make all users members of the
local admin group on each PC as we have a high turnover of users. The setup
I have is similar to a college network. You dont make all students members of
the local admin group. I just want them to be able to see the printer shares
and be able to print from whichever printer they choose.

I have the group policy setup as it should be. Is there any recommendations
you can make rather than me adding all users to the local admin group?

"Robert Li [MSFT]" wrote:

Hi John,

Thanks for positing in our newsgroup.

Based on my experience, on SBS if you publish a printer in AD, when the
client who is also in local admin group logons his computer, he will see
the share printer. You don't need to run the Add Print wizard to add a
printer.

When a domain user who is not in local admin group logons on workstation,
he can't see the printer in Control Panel. If he runs the run the Add
Printer wizard, the printer can be added. No additional permission is need.
I noticed that user can't add printer unless being added to local admin
group, this is normal behavior.

Based on my experience, the problem may be caused by the Group Policy which
disabled adding and deleting printers. Please remove the policy, log off
and then log on computer, try again.

Also, it's not recommended to give user too much permission. Here is the
default setting for network printer.

Everyone Print
Create Owner Manage Document
Power Users Print Manage Document Manage Printer
Print Operators Print Manage Document Manage Printer
Server Operators Print Manage Document Manage Printer
Administrators Print Manage Document Manage Printer

please set the print setting as default as the following article. You can
found the detail information in "Printing permissions assigned to groups"
part.

Assigning printer permissions
http://technet2.microsoft.com/windowsserver/en/library/ef00d10d-3bca-4201-a7
88-855b41ecf0371033.mspx?mfr=true

If the problem persists please help me collect the following information
for further research:

1. Screen shot of the error when adding a printer.

2. MPS-Report

1) Download MPSreport_network from

http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
15706/MPSRPT_NETWORK.EXE
2) Run MPSRPT_NETWORK.exe on the server box.
3) The tool will automatically collect the information. This procedure will
take 10~15 minutes.
4) Open Windows Explorer, navigate to the folder:
%SystemRoot%\MPSReports\Network\Reports\Cab\
5) Send the .cab file directly to me.

Please send the information to v-robeli@xxxxxxxxxxxxx with subject: Users
adding printers.

I am looking forward to hear from you.

If you need further assistance, please don't hesitate to let me know.

Best regards,

Robert Li(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================

This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
<Thread-Topic: Users adding printers
<thread-index: Acf57oTsCieozfkjSu2b91WySvLCeQ==
<X-WBNR-Posting-Host: 207.46.19.168
<From: =?Utf-8?B?Sm9obiBD?= <JohnC@xxxxxxxxxxxxxxxxxxxxxxxxx>
<Subject: Users adding printers
<Date: Tue, 18 Sep 2007 05:22:03 -0700
<Lines: 17
<Message-ID: <D02068CF-462D-4A5D-B990-18FECEEED972@xxxxxxxxxxxxx>
<MIME-Version: 1.0
<Content-Type: text/plain;
< charset="Utf-8"
<Content-Transfer-Encoding: 7bit
<X-Newsreader: Microsoft CDO for Windows 2000
<Content-Class: urn:content-classes:message
<Importance: normal
<Priority: normal
<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2929
<Newsgroups: microsoft.public.windows.server.sbs
<Path: TK2MSFTNGHUB02.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:63753
<NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<
<I have 2 network printers (OKI C5200n). Each user is having to add a
printer
<to their account for them to print. I want to setup user accounts so that
<they automatically have the printers installed for them.
<
<When users are currently trying to add a printer they are able to find the
<printers in the directory but when they are trying to add the printer they
<are getting the message that they dont have permission. What is really
<annoying me is that I have gone into the printer properties and given
<"everyone" the "manage printer" permission. I have also checked the name
of a
<user and it is showing that they have the permission to manage the
printer. I
<have even added them to the Print Operators group but they still get the
<message. I have the group policy set to disabled for adding and deleting
<printers on both the domain and local group policy.
<
<Some users which have exactly the same rights are able to add the printers
<which just adds further confusion! This is happening on both Windows 2K
and
<XP machines. Im really at a loss with this now.
<


.

Relevant Pages

  • NT backup - sys. state
    ... Account used ... is a domain admin and in the local admin group as well.... ... You do not have permission to access portions of System ...
    (microsoft.public.windows.server.general)
  • NT backup error
    ... Ok - problem started occurring under Veritas 10d, ... the job under NTBackup for this error, ... is a domain admin and in the local admin group as well.... ... You do not have permission to access portions of System ...
    (microsoft.public.windows.server.general)
  • NTBU error
    ... Account used ... is a domain admin and in the local admin group as well.... ... You do not have permission to access portions of System ...
    (microsoft.public.windows.server.security)
  • Re: S2k3 Cannot access C$ but have correct permission
    ... If you can access the d$, it may not be a security issue (if the default permission are still set) ... is a member of the local Admin group. ...
    (microsoft.public.windows.server.general)
  • Re: SBS 2003
    ... that he is part of the local admin group. ... I think i need to understand group policy a bit better. ... If I dont have the user as a member of Domain Admins they're ... >> using windows update and installing software on their machine. ...
    (microsoft.public.windows.server.active_directory)