GP prevent user 2 c printer

[Guest MSExchangeStudent]

Hi all

 

I have a GP that prevent users to add a printer so obviously if i want to

install a printer i need to log off and on as the admin. When i do that i

can install the printer succesfully but when i log back on as the user i

cannot see the printer. How do i overcome this

 

BTW , what i then did was to make the user a domain admin and i could instll

the printer but obviously that is the wrong way. I also do not want to

disable the GPO as they delete and change settings in their printer setup.

 

craig

Win xp pro and Win 2003 Server

[Guest Meinolf Weber]

Re: GP prevent user 2 c printer

 

Hello MSExchangeStudent,

 

Did you set the printer as default printer after adding it to the machine?

 

Making the user admin, NO, you are right.

 

If the reason is only that the user changes the printer configuration, then

configure the security settings from the printer for domain users with print

and only give domain admins manage printers right.

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

> Hi all

>

> I have a GP that prevent users to add a printer so obviously if i want

> to install a printer i need to log off and on as the admin. When i do

> that i can install the printer succesfully but when i log back on as

> the user i cannot see the printer. How do i overcome this

>

> BTW , what i then did was to make the user a domain admin and i could

> instll the printer but obviously that is the wrong way. I also do not

> want to disable the GPO as they delete and change settings in their

> printer setup.

>

> craig

> Win xp pro and Win 2003 Server

[Guest MSExchangeStudent]

Re: GP prevent user 2 c printer

 

Hi Meinolf

 

Thanks for replying - BTW just got a call now from a technician that wants

to setup a mail account for the user and cannot because GPO prevents the

domain users to access the Control Panel. The technician is logged on as the

domain user to setup his mail account in Control Panel > Mail icon.

 

Any way around this?

 

Craig

 

"Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message

news:ff16fb66587c88c9ca66ccb5cc71@msnews.microsoft.com...

> Hello MSExchangeStudent,

>

> Did you set the printer as default printer after adding it to the machine?

>

> Making the user admin, NO, you are right.

>

> If the reason is only that the user changes the printer configuration,

> then configure the security settings from the printer for domain users

> with print and only give domain admins manage printers right.

>

> Best regards

>

> Meinolf Weber

> Disclaimer: This posting is provided "AS IS" with no warranties, and

> confers no rights.

>

>> Hi all

>>

>> I have a GP that prevent users to add a printer so obviously if i want

>> to install a printer i need to log off and on as the admin. When i do

>> that i can install the printer succesfully but when i log back on as

>> the user i cannot see the printer. How do i overcome this

>>

>> BTW , what i then did was to make the user a domain admin and i could

>> instll the printer but obviously that is the wrong way. I also do not

>> want to disable the GPO as they delete and change settings in their

>> printer setup.

>>

>> craig

>> Win xp pro and Win 2003 Server

>

>

[Guest Meinolf Weber]

Re: GP prevent user 2 c printer

 

Hello MSExchangeStudent,

 

You gave the answer yourself, the GPO is preventing the access, so reconfigure

the GPO.

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

> Hi Meinolf

>

> Thanks for replying - BTW just got a call now from a technician that

> wants to setup a mail account for the user and cannot because GPO

> prevents the domain users to access the Control Panel. The technician

> is logged on as the domain user to setup his mail account in Control

> Panel > Mail icon.

>

> Any way around this?

>

> Craig

>

> "Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message

> news:ff16fb66587c88c9ca66ccb5cc71@msnews.microsoft.com...

>

>> Hello MSExchangeStudent,

>>

>> Did you set the printer as default printer after adding it to the

>> machine?

>>

>> Making the user admin, NO, you are right.

>>

>> If the reason is only that the user changes the printer

>> configuration, then configure the security settings from the printer

>> for domain users with print and only give domain admins manage

>> printers right.

>>

>> Best regards

>>

>> Meinolf Weber

>> Disclaimer: This posting is provided "AS IS" with no warranties, and

>> confers no rights.

>>> Hi all

>>>

>>> I have a GP that prevent users to add a printer so obviously if i

>>> want to install a printer i need to log off and on as the admin.

>>> When i do that i can install the printer succesfully but when i log

>>> back on as the user i cannot see the printer. How do i overcome this

>>>

>>> BTW , what i then did was to make the user a domain admin and i

>>> could instll the printer but obviously that is the wrong way. I also

>>> do not want to disable the GPO as they delete and change settings in

>>> their printer setup.

>>>

>>> craig

>>> Win xp pro and Win 2003 Server

[Guest Mark Heitbrink [MVP]]

Re: GP prevent user 2 c printer

 

Hi,

 

MSExchangeStudent schrieb:

> I have a GP that prevent users to add a printer so obviously if i want to

> install a printer i need to log off and on as the admin. When i do that i

> can install the printer succesfully but when i log back on as the user i

> cannot see the printer.

 

Right, because network printers are connected as an user, so they are

stored in HKCU. Local Printer are stored in HKLM

 

 

So the solution is:

User are allowed to connect to printer in the network. Printeres are

secured by permission (Everyone = Print, is not the desired setting)

Local printers can´t be installed by users, because they are not allowed

to write to HKLM as a user.

 

With other words: There is no need for your policy.

 

Mark

--

Mark Heitbrink - MVP Windows Server - Group Policy

 

Homepage: http://www.gruppenrichtlinien.de - deutsch

Blog: gpupdate.spaces.live.com - english

[Guest MSExchangeStudent]

Re: GP prevent user 2 c printer

 

 

"Mark Heitbrink [MVP]" <spam-only@gruppenrichtlinien.de> wrote in message

news:uwBrTvE$HHA.3800@TK2MSFTNGP03.phx.gbl...

> Hi,

>

> MSExchangeStudent schrieb:

>> I have a GP that prevent users to add a printer so obviously if i want to

>> install a printer i need to log off and on as the admin. When i do that i

>> can install the printer succesfully but when i log back on as the user i

>> cannot see the printer.

>

> Right, because network printers are connected as an user, so they are

> stored in HKCU. Local Printer are stored in HKLM

>

>

> So the solution is:

> User are allowed to connect to printer in the network. Printeres are

> secured by permission (Everyone = Print, is not the desired setting)

> Local printers can´t be installed by users, because they are not allowed

> to write to HKLM as a user.

 

OK understand that but the same scenario's goes for me when i work with

network printers. Then they are able to access the settings of the printer

which is a problem. So the ideal is to leave the GPO so that they cannot

access the network printer. Am i right if i assume that?

 

The GP will need to remain if i want them not to change the settings of the

network printers.

>

> With other words: There is no need for your policy.

>

> Mark

> --

> Mark Heitbrink - MVP Windows Server - Group Policy

>

> Homepage: http://www.gruppenrichtlinien.de - deutsch

> Blog: gpupdate.spaces.live.com - english