xp printer local policy

[ncvandy]

Domain is NT4 with NT4 & 2K print servers. On our XP workstations domain users cannot add a network printer. (printer is shared with everyone permission) They get an error message that a local policy prevents it. I thought that this setting was controlled by local security policy - "Devices: Prevents users from installing printer drivers" but that policy is disabled. Power users can add the printers but I do not want to make all domain users power users. What setting is dening users from adding network printers. Thanks in advance for your help. Jim

Elegant solutions are nice, but right now I'll settle for whatever works.

 

[wolluf]

Just the fact that they are only users on the local machine. You'll need to make them local power users (why is there a problem with that - its only a local setting, not on the network?)

 

[ncvandy]

Even though it is only a local setting there are ramifications with that, among them: members of the Power Users group can create local user accounts, create local groups and remove users from local groups they have created. They can also remove users from the Power Users, Users, and Guests groups. This is not an access level that some of these folks need.
Jim

Elegant solutions are nice, but right now I'll settle for whatever works.

 

[JoeMon]

Don't know how "right" this is, I know it isn't elegant, but I had a similar problem. Resolved it by installing printers under the admin account. Then users were able to add the network printers to their own profiles.

 

[g4]

I am experiencing the same problem with some printers. Others load fine. Doesn't seem to distinguish between types or brands. It appears to be a problem with security permissions, not to the share but to the actual printer. Adding as an admin works well but with 50 different printers and several hundred users it becomes tedious. Will post if I find a solution.

 

[ncvandy]

Tried adding printer under Admin account and then it added with no problem under user account. Thanks for the work-around JoeMon, will be tedious like g4 says but can use it until permanent fix is found. Will keep searching for it. Thanks for the help. Jim

Elegant solutions are nice, but right now I'll settle for whatever works.

 

[dpav29]

Anyone find a better fix for this yet? What a nightmare! I'm having a terrible time with 4-location WAN in 4 different towns with users that can't be "walked through" adding printers if you know what I mean!

Would sure appreciate feedback if anyone has found a better solution. Thanks!

 

[JoeMon]

I came across this from Microsoft KB that may help some:

http://support.microsoft.com/default.aspx?scid=kb;en-us;314073

Joe