Windows Forum

Ask something
Discussion Locked

User Account Add Printers

0 helpful
8 replies

by geek2d 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I want the users on my network to be able to add their own printers. I have gone in to Local Security Policies and Disabled "Prevent users from installing printer drivers" Also alowed everyone to "load and unload device drivers." What else would keep them from being able to add a local printer?

8 replies

by reference

You might have to edit the user's rights while he's logged-onto the local machine, and the domain. What I've seen many times is that I have had to create two users(on the local machine), one with rights on the local machine, and one for the domain. When the user is logged-onto the domain, he has no rights to do anything on the local machine...like add printers. I usually get around this by adding the everyone group to the LOCAL administrators group on the workstation. This of course eliminates security/control over the local machine, but saves alot of heartache!

by geek2d

Good answer but then what is to prevent the users from installing games? I need to maintain security and if the users can install programs just by not logging in to the Domain then I have lost it.

by shanghai sam

this is a security issue, whats to prevent the user from logining in localy and installing a game, then logining in to the network and using bandwith to do gaming? I need to be able to maintain security and grant only add printer rights.

by mike mullins

Geek2D,

It comes down to rights on the workstation. In a default installation, any member of the Power Users group (on the workstation) can add a printer (because Power Users can install printer drivers. However, a member of the Power Users groupcannot add a port for the printer.)

That said, as long as your Domain Policy doesn't prohibit it. Add your Domain Users Group (or whatever you call it) to the Power Users Group on your local PC's and they'll be able to load any local printer.

Good Luck
0bytes

by mike mullins

I really can't think of a good reason to add any user to the adminstrator group on anything. Through policy and granular rights, you can solve a lot of problems and increase a users productivity and still have some sense of control.

This discussion is closed to new replies.