print server, unable to connect as normal user

[nsglists]

I have a 2003 AD DC which also has the print server on it. It has been doing good work, but of late some users when they search and try to connect to a printer they get the following message,
"A policy is in effect on your computer which prevents you from connecting to this print queue. Please contact your system administrator."

I researched the issue and took care of it as suggested in,

http://support.microsoft.com/kb/319939

http://www.petri.co.il/forums/showthread.php?t=7581

It seemed to work, but oddly enough it works for some users/machines/printers. All users have the same permissions . I as a domain admin can of course connect to all these printers. So, should I provide these users with more permissions like manage printers/documents on each printer or make them print operators or something even after setting gpo policies as suggested in the MS KB article??

Kindly advice.
Thanks.

 

[nsglists]

djdementia,
I also checked the event logs,
Under Application, I didnt see anything amiss or anything info about printserver,
Under Security, I didnt see anything apart from the successful logon/logoff messages.
Under System, I saw a bunch was succesfully publised, created, set messages eventid 42, 9, 2. I checked them in the web page

http://eventid.net

, but again they didnt seem like issues, just information.

Nothing in the client logs in particular, something about Install Driver Table manager service starting and stopping, ID 7035 and 7036. Should I try to disable the XP firewall, doesnt make any difference, I think.

I even made all users members of print operators, but even then they have this issue.

Please advice.
Thanks.

 

[nsglists]

I am sorry to bug you all with my beggin'
Can anyone provide any advice at all!!!

 

[nsglists]

I am just posting back to let know that I got it working.

The only thing that got it working ultimately was when I put the domain users group in the local power users group. But amazingly, when I added the domain users to the local administrators, it didnt work. Wondering what setting does the local power user group have that the local admin group doesnt.

The only thing is since I have to do it on all the machine, I was wondering if there was any setting I can push down from the domain. I dont want to add them to any builtin domain user group on the domain and anyways there is no power users group on the 2003 AD.

Thanks.