XP connect to printer error

[Guest]

I've researched this issue before posting here - and found info - without successful resolution, so maybe someone has further info

When domain users on an XP machine try to install a shared network computer to which they have access and to which they can install from a 2000 pro machine, they receive the following error

A policy is in effect on your computer which prevents you from connecting to this print queue. Please contact your system administrator

I found reference to KB 319939 which mentions the group policy setting at User Configuration\Administrative Templates\Control Panel\Printers\Point and Print Restriction

and since this was a brand new XP install I figured that there was no way this was enabled on the local machine and that's correct its not. There is no comparable GPO setting on my W2k domain/domain controllers

I tried enabling the setting on the XP machine but that didn't correct the problem

My research indicates that this setting is to prevent the (fairly obscure) possibility of downloading a virus-infected print driver to the local machine, but the only solution I am finding is to make the domain user a local administrator on the XP machine which kind of defeats the security effect

I did research the error message on this site and found reference to this site

http://members.shaw.ca/bsanders/NetPrinterAllUsers.ht

but the described procedure describes sharing a newly installed printer and these are existing printers so I don't know if that would work

Any insight would be appreciated.

 

[Guest]

You can work around this by installing the printer driver
locally and mapping an IP-port to the printer in question.

-----Original Message-----
I've researched this issue before posting here - and

found info - without successful resolution, so maybe
someone has further info:

When domain users on an XP machine try to install a

shared network computer to which they have access and to
which they can install from a 2000 pro machine, they
receive the following error:

A policy is in effect on your computer which prevents

you from connecting to this print queue. Please contact
your system administrator.

I found reference to KB 319939 which mentions the group

policy setting at User Configuration\Administrative
Templates\Control Panel\Printers\Point and Print
Restrictions

and since this was a brand new XP install I figured that

there was no way this was enabled on the local machine
and that's correct its not. There is no comparable GPO
setting on my W2k domain/domain controllers.

I tried enabling the setting on the XP machine but that didn't correct the problem.

My research indicates that this setting is to prevent

the (fairly obscure) possibility of downloading a virus-
infected print driver to the local machine, but the only
solution I am finding is to make the domain user a local
administrator on the XP machine which kind of defeats the
security effect.

I did research the error message on this site and found reference to this site:

http://members.shaw.ca/bsanders/NetPrinterAllUsers.htm

but the described procedure describes sharing a newly

installed printer and these are existing printers so I
don't know if that would work.

 

[Guest]

Thanks for the inf

I can also work around it by installing the printer(s) under an admin account then log on as a regular user and install the account. All these necessary workarounds don't make sense however.
I don't have any desire to be actively involved in installing printers on user's local machines. For example, awhile ago I sent out directions on how to install a printer to the local machine

Start -> Search -> Find Printers -> Enter an asterisk in the Name box -> click Find Now and from the printers returned, for any printer the user wanted to install, right-mouse click and choose Connect and the printer was installed. No need for me to be involved beyond setting up the printer on the print server

This XP group policy breaks that method and I don't really get the point of policy