Member of Printer Operators Group Cannot Add Printer

[Guest]

Why can't a member of the Printer Operators group add a printer with a
third-party driver? Additionally, delegation of control has been run to
allow the printer operators group full control to printers. If you define
the policy to load/unload devices for these users only, and it's done at the
domain level (because the stations we need to add the printers to are various
domain controllers and servers), others lose the ability to add devices on
their workstations even if they're administrators.

 

[Alan Morris\(MSFT\)]

You would need to give the group the Load and Unload driver Privilege

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Guest]

Do they also need to be a member of the Power Users group (I have read this?
I prefer not to do that if possible. The group already has that privilege
through the Domain Controllers policy, although it shows as a SID for some
reason rather than the group name.

You would need to give the group the Load and Unload driver Privilege

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

Why can't a member of the Printer Operators group add a printer with a
third-party driver? Additionally, delegation of control has been run to
allow the printer operators group full control to printers. If you define
the policy to load/unload devices for these users only, and it's done at the
domain level (because the stations we need to add the printers to are various
domain controllers and servers), others lose the ability to add devices on
their workstations even if they're administrators.

 

[Alan Morris\(MSFT\)]

Unknown, I do not have domain controllers, just single role print servers.
I use Power Users on my servers for remote administration.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

Do they also need to be a member of the Power Users group (I have read this?
I prefer not to do that if possible. The group already has that privilege
through the Domain Controllers policy, although it shows as a SID for some
reason rather than the group name.

You would need to give the group the Load and Unload driver Privilege

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

Why can't a member of the Printer Operators group add a printer with a
third-party driver? Additionally, delegation of control has been run to
allow the printer operators group full control to printers. If you define
the policy to load/unload devices for these users only, and it's done

at
the

domain level (because the stations we need to add the printers to are various
domain controllers and servers), others lose the ability to add devices on
their workstations even if they're administrators.

 

[Felix Maxa [MSFT]]

The spooler grants administrative permission to "Print Operators" on DCs and
to "Power Users" on servers which are not DCs.

So they answer is yes, you need to use the "power users".
--
Felix Maxa
Windows Printing Team

This posting is provided "AS IS" with no warranties, and confers no rights.

Unknown, I do not have domain controllers, just single role print servers.
I use Power Users on my servers for remote administration.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

Do they also need to be a member of the Power Users group (I have read this?
I prefer not to do that if possible. The group already has that
privilege
through the Domain Controllers policy, although it shows as a SID for
some
reason rather than the group name.

You would need to give the group the Load and Unload driver Privilege

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

Why can't a member of the Printer Operators group add a printer with
a
third-party driver? Additionally, delegation of control has been run to
allow the printer operators group full control to printers. If you define
the policy to load/unload devices for these users only, and it's done at
the
domain level (because the stations we need to add the printers to are
various
domain controllers and servers), others lose the ability to add devices on
their workstations even if they're administrators.