Group Policy to affect local user accounts? (point and print restrictions)

[Guest]

Windows 2003 Active Directory
Windows XP SP2 clients

I am moving previously stand-alone XP-SP2 PC's into my windows AD domain.
Users of these XP PC's login using local user accounts.

These users are getting an error connecting to networked printers - "A
policy is in effect on your computer which prevents you from connecting to
this print queue. Please contact your system administrator."

This is cured by implementing the policy changes in KB319939. fine.

HOWEVER! these changes are in the local user policy of each client PC. I
have hundreds of these PC's coming into the domain so can't do it
individually nor do I want to distribute a .reg file.

Can I not use domain group policy to affect local users on client PC's that
are domain members?

Andy

 

[Alan Morris [MSFT]]

Yes you can set this in a domain wide policy that overrides the local
policy.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Guest]

Thanks for the answer

How do I do set this up?

The users are local to the clients, not domain users.

Andy

Yes you can set this in a domain wide policy that overrides the local
policy.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Windows 2003 Active Directory
Windows XP SP2 clients

I am moving previously stand-alone XP-SP2 PC's into my windows AD domain.
Users of these XP PC's login using local user accounts.

These users are getting an error connecting to networked printers - "A
policy is in effect on your computer which prevents you from connecting
to
this print queue. Please contact your system administrator."

This is cured by implementing the policy changes in KB319939. fine.

HOWEVER! these changes are in the local user policy of each client PC. I
have hundreds of these PC's coming into the domain so can't do it
individually nor do I want to distribute a .reg file.

Can I not use domain group policy to affect local users on client PC's
that
are domain members?

Andy

 

[Alan Morris [MSFT]]

Group policy question, I only deal in print. The setting is a computer
setting so you can push the policy to the machines accounts.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

Thanks for the answer

How do I do set this up?

The users are local to the clients, not domain users.

Andy

Yes you can set this in a domain wide policy that overrides the local
policy.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Windows 2003 Active Directory
Windows XP SP2 clients

I am moving previously stand-alone XP-SP2 PC's into my windows AD
domain.
Users of these XP PC's login using local user accounts.

These users are getting an error connecting to networked printers - "A
policy is in effect on your computer which prevents you from connecting
to
this print queue. Please contact your system administrator."

This is cured by implementing the policy changes in KB319939. fine.

HOWEVER! these changes are in the local user policy of each client PC. I
have hundreds of these PC's coming into the domain so can't do it
individually nor do I want to distribute a .reg file.

Can I not use domain group policy to affect local users on client PC's
that
are domain members?

Andy

 

[Alan Morris [MSFT]]

I was wrong on this it's a per user setting so you would need to change the
local policy unless you add the domain users.

How do the local users authenticate to the print server?

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

Group policy question, I only deal in print. The setting is a computer
setting so you can push the policy to the machines accounts.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Thanks for the answer

How do I do set this up?

The users are local to the clients, not domain users.

Andy

Yes you can set this in a domain wide policy that overrides the local
policy.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Windows 2003 Active Directory
Windows XP SP2 clients

I am moving previously stand-alone XP-SP2 PC's into my windows AD
domain.
Users of these XP PC's login using local user accounts.

These users are getting an error connecting to networked printers - "A
policy is in effect on your computer which prevents you from connecting
to
this print queue. Please contact your system administrator."

This is cured by implementing the policy changes in KB319939. fine.

HOWEVER! these changes are in the local user policy of each client PC.
I
have hundreds of these PC's coming into the domain so can't do it
individually nor do I want to distribute a .reg file.

Can I not use domain group policy to affect local users on client PC's
that
are domain members?

Andy

 

[Guest]

The users are prompted for a domain username when they browse the
printserver in add/remove printers, which they enter.

I was wrong on this it's a per user setting so you would need to change the
local policy unless you add the domain users.

How do the local users authenticate to the print server?

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Group policy question, I only deal in print. The setting is a computer
setting so you can push the policy to the machines accounts.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Thanks for the answer

How do I do set this up?

The users are local to the clients, not domain users.

Andy
Yes you can set this in a domain wide policy that overrides the local
policy.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Windows 2003 Active Directory
Windows XP SP2 clients

I am moving previously stand-alone XP-SP2 PC's into my windows AD
domain.
Users of these XP PC's login using local user accounts.

These users are getting an error connecting to networked printers - "A
policy is in effect on your computer which prevents you from
connecting to
this print queue. Please contact your system administrator."

This is cured by implementing the policy changes in KB319939. fine.

HOWEVER! these changes are in the local user policy of each client PC.
I
have hundreds of these PC's coming into the domain so can't do it
individually nor do I want to distribute a .reg file.

Can I not use domain group policy to affect local users on client PC's
that
are domain members?

Andy