Guest wright47 Posted April 5, 2008 Posted April 5, 2008 I'm trying to enable my helpdesk personnel to create printers on some of our member servers, and for business reasons they can NOT be local admins on those servers. I've put them in domain\builtin\Print Operators. I've put them in the Print Operators group on the local servers. I've assigned them in local policy the right "Load and unload device drivers" on those member servers. But they still can't create new local printers. What more do I need to do to enable a non admin to create local printers and/or new ports (for network printers)?
Guest wright47 Posted April 5, 2008 Posted April 5, 2008 RE: Delegating printer creation to non-admins in W2K3 After a little more experimentation, I find that adding the personnel to "Power Users" seems to give them this ability. But I'd still like to avoid that, and delegate only the exact rights / grant the applicable perms on fs / registry, etc. necessary to create printers on these servers. Thanks in advance! "wright47" wrote: > I'm trying to enable my helpdesk personnel to create printers on some of our > member servers, and for business reasons they can NOT be local admins on > those servers. I've put them in domain\builtin\Print Operators. I've put them > in the Print Operators group on the local servers. I've assigned them in > local policy the right "Load and unload device drivers" on those member > servers. But they still can't create new local printers. What more do I need > to do to enable a non admin to create local printers and/or new ports (for > network printers)?
Guest jungblpe Posted May 12, 2008 Posted May 12, 2008 RE: Delegating printer creation to non-admins in W2K3 Wright47 -- Did you ever find a solution to this other then adding the users/group to the built-in Power Users group? We have ran into the same situation and I am like you and don't want to add the users to the built-in PU group. "wright47" wrote: > After a little more experimentation, I find that adding the personnel to > "Power Users" seems to give them this ability. But I'd still like to avoid > that, and delegate only the exact rights / grant the applicable perms on fs / > registry, etc. necessary to create printers on these servers. > > Thanks in advance! > > > > "wright47" wrote: > > > I'm trying to enable my helpdesk personnel to create printers on some of our > > member servers, and for business reasons they can NOT be local admins on > > those servers. I've put them in domain\builtin\Print Operators. I've put them > > in the Print Operators group on the local servers. I've assigned them in > > local policy the right "Load and unload device drivers" on those member > > servers. But they still can't create new local printers. What more do I need > > to do to enable a non admin to create local printers and/or new ports (for > > network printers)?
Guest wright47 Posted May 13, 2008 Posted May 13, 2008 RE: Delegating printer creation to non-admins in W2K3 I never did. We ended up appointing only one person as the "printer creator" person, creating him a group, and adding that group to the Power Users on the servers in question. Not optimal at all, but no one seems to know how to delegate this, and the time I allowed myself to allocate for experimentation was up. :-) Good luck on this one. "jungblpe" wrote: > Wright47 -- Did you ever find a solution to this other then adding the > users/group to the built-in Power Users group? We have ran into the same > situation and I am like you and don't want to add the users to the built-in > PU group. > > "wright47" wrote: > > > After a little more experimentation, I find that adding the personnel to > > "Power Users" seems to give them this ability. But I'd still like to avoid > > that, and delegate only the exact rights / grant the applicable perms on fs / > > registry, etc. necessary to create printers on these servers. > > > > Thanks in advance! > > > > > > > > "wright47" wrote: > > > > > I'm trying to enable my helpdesk personnel to create printers on some of our > > > member servers, and for business reasons they can NOT be local admins on > > > those servers. I've put them in domain\builtin\Print Operators. I've put them > > > in the Print Operators group on the local servers. I've assigned them in > > > local policy the right "Load and unload device drivers" on those member > > > servers. But they still can't create new local printers. What more do I need > > > to do to enable a non admin to create local printers and/or new ports (for > > > network printers)?
Guest jungblpe Posted May 13, 2008 Posted May 13, 2008 RE: Delegating printer creation to non-admins in W2K3 Thanks for writing back. It seems foolish to spend the amount of time I have already invested in figuring this one out, but it bugs me. I will update you if I find anything. "wright47" wrote: > I never did. We ended up appointing only one person as the "printer creator" > person, creating him a group, and adding that group to the Power Users on the > servers in question. > > Not optimal at all, but no one seems to know how to delegate this, and the > time I allowed myself to allocate for experimentation was up. :-) > > Good luck on this one. > > "jungblpe" wrote: > > > Wright47 -- Did you ever find a solution to this other then adding the > > users/group to the built-in Power Users group? We have ran into the same > > situation and I am like you and don't want to add the users to the built-in > > PU group. > > > > "wright47" wrote: > > > > > After a little more experimentation, I find that adding the personnel to > > > "Power Users" seems to give them this ability. But I'd still like to avoid > > > that, and delegate only the exact rights / grant the applicable perms on fs / > > > registry, etc. necessary to create printers on these servers. > > > > > > Thanks in advance! > > > > > > > > > > > > "wright47" wrote: > > > > > > > I'm trying to enable my helpdesk personnel to create printers on some of our > > > > member servers, and for business reasons they can NOT be local admins on > > > > those servers. I've put them in domain\builtin\Print Operators. I've put them > > > > in the Print Operators group on the local servers. I've assigned them in > > > > local policy the right "Load and unload device drivers" on those member > > > > servers. But they still can't create new local printers. What more do I need > > > > to do to enable a non admin to create local printers and/or new ports (for > > > > network printers)?
Recommended Posts