cannot connect network printer from XP workstation due to AD policy

[Gerald]

Hi,
when I try to connect a printer over the network from an XP workstation,
I get the error message " A policy is in effect on your computer which
prevents you from connecting to this printer. Please contact your Admin".
But I'm the admin !!
When XP is new installed, a normal user without admin rights ( user, power user)
is able to do the connection.
As soon as the workstation is attached to our AD domain, I get
the above error message. With local admin rights all is working correctly
and as soon as an admin has connected a certein printer type, this printer can also
be connected by normal users.
On a W2k workstation attached to our AD domain I can connect the printer
as a power user.

It is clear, that a globbal policy in our AD domain is responsible for
this, but I do not know which policy.
I have turned on any logging facility on the client but there is no entry
which corresponds to the error message of the user.

How can I find which policy is preventing me to connect to the printer?

Any help is welcome!!

Regards

Gerald

 

[Alan Morris\(MSFT\)]

You find it here!

There is a policy on XP SP1 that prevents true connections to "untrusted"
(not in the same domain forest) servers.
http://support.microsoft.com/default.aspx?scid=kb;en-us;319939
Description of the Point and Print Restrictions Policy Setting in Windows
Server 2003 and Windows XP



a.. By default, this policy setting is not configured. If you do not
configure this policy setting, users cannot download Point and Print drivers
from computers that are not in their Active Directory forest. The result of
not configuring the setting is the same as enabling the policy and setting
it to Users can only Point and Print to machines in their Forest.



--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Guest]

Alan,

thanks it works!!
We are migrating from our NT domain into a new AD domain.
The printservers are still in our NT domain
while the new XP workstation were directly installed into the AD domain.

Best regards

Gerald