Windows Forum

Ask something
Discussion Locked

Allow users to install local printers

0 helpful
7 replies

by gina

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

My organization would like to selectively allow mobile users to install local printers and I am interested to hear if anyone else has implemented a configuration that works.

Our systems are running WinXP SP2. Users are Power Users on their systems. Systems are members of a domain (WinServ 2003/AD). We are not currently using Group Policies heavily, but that is an option.

I am looking for a very specific solution. The users must remain only Power Users. Preferably, the configuration would enable only local printer installation. It also must allow for parallel or USB printers to be installed. It must be applicable to specific users (or alternatively specific computers).

I am especially interested in hearing from others who have implemented this configuration or something similar and have made it work, but would also accept untested solutions that I can make work. Thanks.

7 replies

by dpetkovsek

You can use AD OUs and configure a group policy specific for each OU where you enable printer installation.

by xt john

Here is a link to do what you'd like to do.

http://www.jsifaq.com/SUBJ/tip4700/rh4739.htm

I tried this on my PC here at work, logged in locally as a power user, and the add local printer options were greyed out. I made the change using gpedit.msc, logged back in and the add local printer option was available. You can make this change on every laptop, or create an organizational unit to place all the laptop users, and set this policy on the OU. All you have to do is add Power Users to the list Computer Configuration / Windows Settings / Security Settings / Local Policies / User Rights Assignment in gpedit.msc

by gina

Thanks for trying it out. Eventually, we hope to be utilizing Group Policy more effectively and this will be one policy we can set up selectively.

by gina

Thanks. I appreciate the MSKB link. I searched, but did not find that one. That solution is exactly what I was hoping to find since it can be implemented quickly on a single system.

This discussion is closed to new replies.