Managing printers and drivers deployment to Xp workstations

N

newsgroup

Hi,

I have just setup my windows 2003 R2 print server, and would like to
push printer connection and drivers to Windows XP workstations using
GPO. The issue l have is, the printer connections and printer drivers
do not appear on the workstation because the login user does not have
permission to install drivers. Is there a way to allow users to install
printer drivers without grant them administrative previledge on the
workstation. Users have the permission to print.

Collins.
 
A

Alan Morris [MSFT]

Yes. Did you change the default setting? On XP the default for this policy
is disabled. On Server this policy is enabled

secpol.msc
Local Policies
Security Options
Devices:prevent users from installing printer drivers


If the logged on users attempts to make a connection manually to the server
is there any error?

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.
 
N

newsgroup

Hi Alan,

The default settings on the server and workstations are intact. Server
policy is enabled thus preventing user from installing printer driver,
and on workstations the policy is disabled.

If users attempt to make a connection manually, an error message pops
up
"A policy is in effect on your computer which prevents you from
connecting to this print queue. Please contact your system
administrator."

Collins.

Yes. Did you change the default setting? On XP the default for this policy
is disabled. On Server this policy is enabled

secpol.msc
Local Policies
Security Options
Devices:prevent users from installing printer drivers


If the logged on users attempts to make a connection manually to the server
is there any error?

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

newsgroup said:
Hi,

I have just setup my windows 2003 R2 print server, and would like to
push printer connection and drivers to Windows XP workstations using
GPO. The issue l have is, the printer connections and printer drivers
do not appear on the workstation because the login user does not have
permission to install drivers. Is there a way to allow users to install
printer drivers without grant them administrative previledge on the
workstation. Users have the permission to print.

Collins.
 
A

Alan Morris [MSFT]

This is the point and print restriction policy. Is the server in the same
forest as the user accounts?

Is the policy currently unconfigured?

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

newsgroup said:
Hi Alan,

The default settings on the server and workstations are intact. Server
policy is enabled thus preventing user from installing printer driver,
and on workstations the policy is disabled.

If users attempt to make a connection manually, an error message pops
up
"A policy is in effect on your computer which prevents you from
connecting to this print queue. Please contact your system
administrator."

Collins.

Yes. Did you change the default setting? On XP the default for this
policy
is disabled. On Server this policy is enabled

secpol.msc
Local Policies
Security Options
Devices:prevent users from installing printer drivers


If the logged on users attempts to make a connection manually to the
server
is there any error?

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

newsgroup said:
Hi,

I have just setup my windows 2003 R2 print server, and would like to
push printer connection and drivers to Windows XP workstations using
GPO. The issue l have is, the printer connections and printer drivers
do not appear on the workstation because the login user does not have
permission to install drivers. Is there a way to allow users to install
printer drivers without grant them administrative previledge on the
workstation. Users have the permission to print.

Collins.
 
N

newsgroup

Yes, The server and the user accounts are all in the same Forest. We
only have one Forest, and one Active Directory Domain.

If l sign on to the workstation as an Admin user, the printer drivers
are installed and connections are created. If sign back on as a
non-admin user to the same workstation, the printer connection works
because the print driver has been installed by the previous Admin log
on process.

I have 1600 workstations in the company, so there should a way for the
GPO to push the drivers and printer connection assigned to workstation
without granting users admin rights.

Is the policy currently unconfigured? I am not sure what you are asking
here. The GPO is configured to deploy a number of printers to
"machines" not users.

Collins.
This is the point and print restriction policy. Is the server in the same
forest as the user accounts?

Is the policy currently unconfigured?

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

newsgroup said:
Hi Alan,

The default settings on the server and workstations are intact. Server
policy is enabled thus preventing user from installing printer driver,
and on workstations the policy is disabled.

If users attempt to make a connection manually, an error message pops
up
"A policy is in effect on your computer which prevents you from
connecting to this print queue. Please contact your system
administrator."

Collins.

Yes. Did you change the default setting? On XP the default for this
policy
is disabled. On Server this policy is enabled

secpol.msc
Local Policies
Security Options
Devices:prevent users from installing printer drivers


If the logged on users attempts to make a connection manually to the
server
is there any error?

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Hi,

I have just setup my windows 2003 R2 print server, and would like to
push printer connection and drivers to Windows XP workstations using
GPO. The issue l have is, the printer connections and printer drivers
do not appear on the workstation because the login user does not have
permission to install drivers. Is there a way to allow users to install
printer drivers without grant them administrative previledge on the
workstation. Users have the permission to print.

Collins.
 
A

Alan Morris [MSFT]

The Point and Print Restrictions policy. Is it unconfigured? You can
assign this in a domain GPO

User Config
Admin Templates
Control Panel
Printers

This policy setting restricts the servers that a client can connect to for
point and print. The policy setting applies only to non Print Administrators
clients, and only to machines that are members of a domain.

When the policy setting is enabled, the client can be restricted to only
point and print to a server within its own forest, and/or to a list of
explicitly trusted servers.

When the policy setting is not-configured, it defaults to allowing point and
print only within the client's forest.

When the policy setting is disabled, client machines can point and print to
any server.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

newsgroup said:
Yes, The server and the user accounts are all in the same Forest. We
only have one Forest, and one Active Directory Domain.

If l sign on to the workstation as an Admin user, the printer drivers
are installed and connections are created. If sign back on as a
non-admin user to the same workstation, the printer connection works
because the print driver has been installed by the previous Admin log
on process.

I have 1600 workstations in the company, so there should a way for the
GPO to push the drivers and printer connection assigned to workstation
without granting users admin rights.

Is the policy currently unconfigured? I am not sure what you are asking
here. The GPO is configured to deploy a number of printers to
"machines" not users.

Collins.
This is the point and print restriction policy. Is the server in the
same
forest as the user accounts?

Is the policy currently unconfigured?

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

newsgroup said:
Hi Alan,

The default settings on the server and workstations are intact. Server
policy is enabled thus preventing user from installing printer driver,
and on workstations the policy is disabled.

If users attempt to make a connection manually, an error message pops
up
"A policy is in effect on your computer which prevents you from
connecting to this print queue. Please contact your system
administrator."

Collins.


Alan Morris [MSFT] wrote:
Yes. Did you change the default setting? On XP the default for this
policy
is disabled. On Server this policy is enabled

secpol.msc
Local Policies
Security Options
Devices:prevent users from installing printer drivers


If the logged on users attempts to make a connection manually to the
server
is there any error?

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Hi,

I have just setup my windows 2003 R2 print server, and would like to
push printer connection and drivers to Windows XP workstations using
GPO. The issue l have is, the printer connections and printer
drivers
do not appear on the workstation because the login user does not
have
permission to install drivers. Is there a way to allow users to
install
printer drivers without grant them administrative previledge on the
workstation. Users have the permission to print.

Collins.
 
N

newsgroup

Hi Alan,

Thanks for all your assistance. The print drivers and printer
connections were created on the workstation for the non-admin user
after enabling the Point and Print Restrictions policy in the GPO.

Collins.

The Point and Print Restrictions policy. Is it unconfigured? You can
assign this in a domain GPO

User Config
Admin Templates
Control Panel
Printers

This policy setting restricts the servers that a client can connect to for
point and print. The policy setting applies only to non Print Administrators
clients, and only to machines that are members of a domain.

When the policy setting is enabled, the client can be restricted to only
point and print to a server within its own forest, and/or to a list of
explicitly trusted servers.

When the policy setting is not-configured, it defaults to allowing point and
print only within the client's forest.

When the policy setting is disabled, client machines can point and print to
any server.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

newsgroup said:
Yes, The server and the user accounts are all in the same Forest. We
only have one Forest, and one Active Directory Domain.

If l sign on to the workstation as an Admin user, the printer drivers
are installed and connections are created. If sign back on as a
non-admin user to the same workstation, the printer connection works
because the print driver has been installed by the previous Admin log
on process.

I have 1600 workstations in the company, so there should a way for the
GPO to push the drivers and printer connection assigned to workstation
without granting users admin rights.

Is the policy currently unconfigured? I am not sure what you are asking
here. The GPO is configured to deploy a number of printers to
"machines" not users.

Collins.
This is the point and print restriction policy. Is the server in the
same
forest as the user accounts?

Is the policy currently unconfigured?

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Hi Alan,

The default settings on the server and workstations are intact. Server
policy is enabled thus preventing user from installing printer driver,
and on workstations the policy is disabled.

If users attempt to make a connection manually, an error message pops
up
"A policy is in effect on your computer which prevents you from
connecting to this print queue. Please contact your system
administrator."

Collins.


Alan Morris [MSFT] wrote:
Yes. Did you change the default setting? On XP the default for this
policy
is disabled. On Server this policy is enabled

secpol.msc
Local Policies
Security Options
Devices:prevent users from installing printer drivers


If the logged on users attempts to make a connection manually to the
server
is there any error?

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Hi,

I have just setup my windows 2003 R2 print server, and would like to
push printer connection and drivers to Windows XP workstations using
GPO. The issue l have is, the printer connections and printer
drivers
do not appear on the workstation because the login user does not
have
permission to install drivers. Is there a way to allow users to
install
printer drivers without grant them administrative previledge on the
workstation. Users have the permission to print.

Collins.
 
A

Alan Morris [MSFT]

Did you Enable, Disable, or configure the print server name in the policy.

I just wanted to pass along how our customers use this policy.

thanks

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

newsgroup said:
Hi Alan,

Thanks for all your assistance. The print drivers and printer
connections were created on the workstation for the non-admin user
after enabling the Point and Print Restrictions policy in the GPO.

Collins.

The Point and Print Restrictions policy. Is it unconfigured? You can
assign this in a domain GPO

User Config
Admin Templates
Control Panel
Printers

This policy setting restricts the servers that a client can connect to
for
point and print. The policy setting applies only to non Print
Administrators
clients, and only to machines that are members of a domain.

When the policy setting is enabled, the client can be restricted to only
point and print to a server within its own forest, and/or to a list of
explicitly trusted servers.

When the policy setting is not-configured, it defaults to allowing point
and
print only within the client's forest.

When the policy setting is disabled, client machines can point and print
to
any server.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

newsgroup said:
Yes, The server and the user accounts are all in the same Forest. We
only have one Forest, and one Active Directory Domain.

If l sign on to the workstation as an Admin user, the printer drivers
are installed and connections are created. If sign back on as a
non-admin user to the same workstation, the printer connection works
because the print driver has been installed by the previous Admin log
on process.

I have 1600 workstations in the company, so there should a way for the
GPO to push the drivers and printer connection assigned to workstation
without granting users admin rights.

Is the policy currently unconfigured? I am not sure what you are asking
here. The GPO is configured to deploy a number of printers to
"machines" not users.

Collins.

Alan Morris [MSFT] wrote:
This is the point and print restriction policy. Is the server in the
same
forest as the user accounts?

Is the policy currently unconfigured?

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Hi Alan,

The default settings on the server and workstations are intact.
Server
policy is enabled thus preventing user from installing printer
driver,
and on workstations the policy is disabled.

If users attempt to make a connection manually, an error message
pops
up
"A policy is in effect on your computer which prevents you from
connecting to this print queue. Please contact your system
administrator."

Collins.


Alan Morris [MSFT] wrote:
Yes. Did you change the default setting? On XP the default for
this
policy
is disabled. On Server this policy is enabled

secpol.msc
Local Policies
Security Options
Devices:prevent users from installing printer drivers


If the logged on users attempts to make a connection manually to
the
server
is there any error?

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Hi,

I have just setup my windows 2003 R2 print server, and would like
to
push printer connection and drivers to Windows XP workstations
using
GPO. The issue l have is, the printer connections and printer
drivers
do not appear on the workstation because the login user does not
have
permission to install drivers. Is there a way to allow users to
install
printer drivers without grant them administrative previledge on
the
workstation. Users have the permission to print.

Collins.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top