I have a widely arrayed user base and I have a web page that loads a batch
file with the prnport.vbs to install printer ports and drivers. The local
users require admin privs to create a TCP/IP port however.
I cannot use a print server because of the distributed nature of the
userbase, so I have to find a way to allow *as granularly as possible* a
non-privileged account the access to create a standard tcp/ip port.

I've been hacking through group policy (domain and local) and the registry
to no avail thus far.
Granting admin privs is not an option, obviously.

Err.. So, my question is, how can I do this thing?
And more importantly,
"Hello everyone" and "Thanks for any help you can offer!"
Sheesh, nettiquette anyone?

"iaisadmin" wrote:
Hello Everyone,

> I have a widely arrayed user base and I have a web page that loads a batch
> file with the prnport.vbs to install printer ports and drivers. The local
> users require admin privs to create a TCP/IP port however.
> I cannot use a print server because of the distributed nature of the
> userbase, so I have to find a way to allow *as granularly as possible* a
> non-privileged account the access to create a standard tcp/ip port.
>
> I've been hacking through group policy (domain and local) and the registry
> to no avail thus far.
> Granting admin privs is not an option, obviously.

minimum is Power User to add ports for XP

same for drivers but you must add the Load driver privilege to the Power
Users group also.


In Vista (and Windows 7 -- coming to a you soon) users can add signed
package drivers and TCP Ports.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no rights.

"iaisadmin" <(E-Mail Removed)> wrote in message
news:799E004B-682E-469D-8097-(E-Mail Removed)...
> Err.. So, my question is, how can I do this thing?
> And more importantly,
> "Hello everyone" and "Thanks for any help you can offer!"
> Sheesh, nettiquette anyone?
>
> "iaisadmin" wrote:
> Hello Everyone,
>
>> I have a widely arrayed user base and I have a web page that loads a
>> batch
>> file with the prnport.vbs to install printer ports and drivers. The local
>> users require admin privs to create a TCP/IP port however.
>> I cannot use a print server because of the distributed nature of the
>> userbase, so I have to find a way to allow *as granularly as possible* a
>> non-privileged account the access to create a standard tcp/ip port.
>>
>> I've been hacking through group policy (domain and local) and the
>> registry
>> to no avail thus far.
>> Granting admin privs is not an option, obviously.