Guest MSExchangeStudent Posted September 21, 2007 Posted September 21, 2007 Hi all I have a GP that prevent users to add a printer so obviously if i want to install a printer i need to log off and on as the admin. When i do that i can install the printer succesfully but when i log back on as the user i cannot see the printer. How do i overcome this BTW , what i then did was to make the user a domain admin and i could instll the printer but obviously that is the wrong way. I also do not want to disable the GPO as they delete and change settings in their printer setup. craig Win xp pro and Win 2003 Server
Guest Meinolf Weber Posted September 21, 2007 Posted September 21, 2007 Re: GP prevent user 2 c printer Hello MSExchangeStudent, Did you set the printer as default printer after adding it to the machine? Making the user admin, NO, you are right. If the reason is only that the user changes the printer configuration, then configure the security settings from the printer for domain users with print and only give domain admins manage printers right. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. > Hi all > > I have a GP that prevent users to add a printer so obviously if i want > to install a printer i need to log off and on as the admin. When i do > that i can install the printer succesfully but when i log back on as > the user i cannot see the printer. How do i overcome this > > BTW , what i then did was to make the user a domain admin and i could > instll the printer but obviously that is the wrong way. I also do not > want to disable the GPO as they delete and change settings in their > printer setup. > > craig > Win xp pro and Win 2003 Server
Guest MSExchangeStudent Posted September 21, 2007 Posted September 21, 2007 Re: GP prevent user 2 c printer Hi Meinolf Thanks for replying - BTW just got a call now from a technician that wants to setup a mail account for the user and cannot because GPO prevents the domain users to access the Control Panel. The technician is logged on as the domain user to setup his mail account in Control Panel > Mail icon. Any way around this? Craig "Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message news:ff16fb66587c88c9ca66ccb5cc71@msnews.microsoft.com... > Hello MSExchangeStudent, > > Did you set the printer as default printer after adding it to the machine? > > Making the user admin, NO, you are right. > > If the reason is only that the user changes the printer configuration, > then configure the security settings from the printer for domain users > with print and only give domain admins manage printers right. > > Best regards > > Meinolf Weber > Disclaimer: This posting is provided "AS IS" with no warranties, and > confers no rights. > >> Hi all >> >> I have a GP that prevent users to add a printer so obviously if i want >> to install a printer i need to log off and on as the admin. When i do >> that i can install the printer succesfully but when i log back on as >> the user i cannot see the printer. How do i overcome this >> >> BTW , what i then did was to make the user a domain admin and i could >> instll the printer but obviously that is the wrong way. I also do not >> want to disable the GPO as they delete and change settings in their >> printer setup. >> >> craig >> Win xp pro and Win 2003 Server > >
Guest Meinolf Weber Posted September 21, 2007 Posted September 21, 2007 Re: GP prevent user 2 c printer Hello MSExchangeStudent, You gave the answer yourself, the GPO is preventing the access, so reconfigure the GPO. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. > Hi Meinolf > > Thanks for replying - BTW just got a call now from a technician that > wants to setup a mail account for the user and cannot because GPO > prevents the domain users to access the Control Panel. The technician > is logged on as the domain user to setup his mail account in Control > Panel > Mail icon. > > Any way around this? > > Craig > > "Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message > news:ff16fb66587c88c9ca66ccb5cc71@msnews.microsoft.com... > >> Hello MSExchangeStudent, >> >> Did you set the printer as default printer after adding it to the >> machine? >> >> Making the user admin, NO, you are right. >> >> If the reason is only that the user changes the printer >> configuration, then configure the security settings from the printer >> for domain users with print and only give domain admins manage >> printers right. >> >> Best regards >> >> Meinolf Weber >> Disclaimer: This posting is provided "AS IS" with no warranties, and >> confers no rights. >>> Hi all >>> >>> I have a GP that prevent users to add a printer so obviously if i >>> want to install a printer i need to log off and on as the admin. >>> When i do that i can install the printer succesfully but when i log >>> back on as the user i cannot see the printer. How do i overcome this >>> >>> BTW , what i then did was to make the user a domain admin and i >>> could instll the printer but obviously that is the wrong way. I also >>> do not want to disable the GPO as they delete and change settings in >>> their printer setup. >>> >>> craig >>> Win xp pro and Win 2003 Server
Guest Mark Heitbrink [MVP] Posted September 21, 2007 Posted September 21, 2007 Re: GP prevent user 2 c printer Hi, MSExchangeStudent schrieb: > I have a GP that prevent users to add a printer so obviously if i want to > install a printer i need to log off and on as the admin. When i do that i > can install the printer succesfully but when i log back on as the user i > cannot see the printer. Right, because network printers are connected as an user, so they are stored in HKCU. Local Printer are stored in HKLM So the solution is: User are allowed to connect to printer in the network. Printeres are secured by permission (Everyone = Print, is not the desired setting) Local printers can´t be installed by users, because they are not allowed to write to HKLM as a user. With other words: There is no need for your policy. Mark -- Mark Heitbrink - MVP Windows Server - Group Policy Homepage: http://www.gruppenrichtlinien.de - deutsch Blog: gpupdate.spaces.live.com - english
Guest MSExchangeStudent Posted September 21, 2007 Posted September 21, 2007 Re: GP prevent user 2 c printer "Mark Heitbrink [MVP]" <spam-only@gruppenrichtlinien.de> wrote in message news:uwBrTvE$HHA.3800@TK2MSFTNGP03.phx.gbl... > Hi, > > MSExchangeStudent schrieb: >> I have a GP that prevent users to add a printer so obviously if i want to >> install a printer i need to log off and on as the admin. When i do that i >> can install the printer succesfully but when i log back on as the user i >> cannot see the printer. > > Right, because network printers are connected as an user, so they are > stored in HKCU. Local Printer are stored in HKLM > > > So the solution is: > User are allowed to connect to printer in the network. Printeres are > secured by permission (Everyone = Print, is not the desired setting) > Local printers can´t be installed by users, because they are not allowed > to write to HKLM as a user. OK understand that but the same scenario's goes for me when i work with network printers. Then they are able to access the settings of the printer which is a problem. So the ideal is to leave the GPO so that they cannot access the network printer. Am i right if i assume that? The GP will need to remain if i want them not to change the settings of the network printers. > > With other words: There is no need for your policy. > > Mark > -- > Mark Heitbrink - MVP Windows Server - Group Policy > > Homepage: http://www.gruppenrichtlinien.de - deutsch > Blog: gpupdate.spaces.live.com - english
Recommended Posts