GP prevent user 2 c printer

  • Thread starter Thread starter MSExchangeStudent
  • Start date Start date
M

MSExchangeStudent

Guest
Hi all

I have a GP that prevent users to add a printer so obviously if i want to
install a printer i need to log off and on as the admin. When i do that i
can install the printer succesfully but when i log back on as the user i
cannot see the printer. How do i overcome this

BTW , what i then did was to make the user a domain admin and i could instll
the printer but obviously that is the wrong way. I also do not want to
disable the GPO as they delete and change settings in their printer setup.

craig
Win xp pro and Win 2003 Server
 
Re: GP prevent user 2 c printer

Hello MSExchangeStudent,

Did you set the printer as default printer after adding it to the machine?

Making the user admin, NO, you are right.

If the reason is only that the user changes the printer configuration, then
configure the security settings from the printer for domain users with print
and only give domain admins manage printers right.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

> Hi all
>
> I have a GP that prevent users to add a printer so obviously if i want
> to install a printer i need to log off and on as the admin. When i do
> that i can install the printer succesfully but when i log back on as
> the user i cannot see the printer. How do i overcome this
>
> BTW , what i then did was to make the user a domain admin and i could
> instll the printer but obviously that is the wrong way. I also do not
> want to disable the GPO as they delete and change settings in their
> printer setup.
>
> craig
> Win xp pro and Win 2003 Server
 
Re: GP prevent user 2 c printer

Hi Meinolf

Thanks for replying - BTW just got a call now from a technician that wants
to setup a mail account for the user and cannot because GPO prevents the
domain users to access the Control Panel. The technician is logged on as the
domain user to setup his mail account in Control Panel > Mail icon.

Any way around this?

Craig

"Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb66587c88c9ca66ccb5cc71@msnews.microsoft.com...
> Hello MSExchangeStudent,
>
> Did you set the printer as default printer after adding it to the machine?
>
> Making the user admin, NO, you are right.
>
> If the reason is only that the user changes the printer configuration,
> then configure the security settings from the printer for domain users
> with print and only give domain admins manage printers right.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
>
>> Hi all
>>
>> I have a GP that prevent users to add a printer so obviously if i want
>> to install a printer i need to log off and on as the admin. When i do
>> that i can install the printer succesfully but when i log back on as
>> the user i cannot see the printer. How do i overcome this
>>
>> BTW , what i then did was to make the user a domain admin and i could
>> instll the printer but obviously that is the wrong way. I also do not
>> want to disable the GPO as they delete and change settings in their
>> printer setup.
>>
>> craig
>> Win xp pro and Win 2003 Server
>
>
 
Re: GP prevent user 2 c printer

Hello MSExchangeStudent,

You gave the answer yourself, the GPO is preventing the access, so reconfigure
the GPO.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

> Hi Meinolf
>
> Thanks for replying - BTW just got a call now from a technician that
> wants to setup a mail account for the user and cannot because GPO
> prevents the domain users to access the Control Panel. The technician
> is logged on as the domain user to setup his mail account in Control
> Panel > Mail icon.
>
> Any way around this?
>
> Craig
>
> "Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message
> news:ff16fb66587c88c9ca66ccb5cc71@msnews.microsoft.com...
>
>> Hello MSExchangeStudent,
>>
>> Did you set the printer as default printer after adding it to the
>> machine?
>>
>> Making the user admin, NO, you are right.
>>
>> If the reason is only that the user changes the printer
>> configuration, then configure the security settings from the printer
>> for domain users with print and only give domain admins manage
>> printers right.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>>> Hi all
>>>
>>> I have a GP that prevent users to add a printer so obviously if i
>>> want to install a printer i need to log off and on as the admin.
>>> When i do that i can install the printer succesfully but when i log
>>> back on as the user i cannot see the printer. How do i overcome this
>>>
>>> BTW , what i then did was to make the user a domain admin and i
>>> could instll the printer but obviously that is the wrong way. I also
>>> do not want to disable the GPO as they delete and change settings in
>>> their printer setup.
>>>
>>> craig
>>> Win xp pro and Win 2003 Server
 
Re: GP prevent user 2 c printer

Hi,

MSExchangeStudent schrieb:
> I have a GP that prevent users to add a printer so obviously if i want to
> install a printer i need to log off and on as the admin. When i do that i
> can install the printer succesfully but when i log back on as the user i
> cannot see the printer.

Right, because network printers are connected as an user, so they are
stored in HKCU. Local Printer are stored in HKLM


So the solution is:
User are allowed to connect to printer in the network. Printeres are
secured by permission (Everyone = Print, is not the desired setting)
Local printers can´t be installed by users, because they are not allowed
to write to HKLM as a user.

With other words: There is no need for your policy.

Mark
--
Mark Heitbrink - MVP Windows Server - Group Policy

Homepage: www.gruppenrichtlinien.de - deutsch
Blog: gpupdate.spaces.live.com - english
 
Re: GP prevent user 2 c printer


"Mark Heitbrink [MVP]" <spam-only@gruppenrichtlinien.de> wrote in message
news:uwBrTvE$HHA.3800@TK2MSFTNGP03.phx.gbl...
> Hi,
>
> MSExchangeStudent schrieb:
>> I have a GP that prevent users to add a printer so obviously if i want to
>> install a printer i need to log off and on as the admin. When i do that i
>> can install the printer succesfully but when i log back on as the user i
>> cannot see the printer.
>
> Right, because network printers are connected as an user, so they are
> stored in HKCU. Local Printer are stored in HKLM
>
>
> So the solution is:
> User are allowed to connect to printer in the network. Printeres are
> secured by permission (Everyone = Print, is not the desired setting)
> Local printers can´t be installed by users, because they are not allowed
> to write to HKLM as a user.

OK understand that but the same scenario's goes for me when i work with
network printers. Then they are able to access the settings of the printer
which is a problem. So the ideal is to leave the GPO so that they cannot
access the network printer. Am i right if i assume that?

The GP will need to remain if i want them not to change the settings of the
network printers.

>
> With other words: There is no need for your policy.
>
> Mark
> --
> Mark Heitbrink - MVP Windows Server - Group Policy
>
> Homepage: www.gruppenrichtlinien.de - deutsch
> Blog: gpupdate.spaces.live.com - english
 
Back
Top