Mixed Mode Printing

[Wayne]

We have a Windows 2000 print server and mostly Windows NT
clients. The client systems have been locked down for
security reasons. However, I think they may be over-
locked.

We have numerous HP4000N, HP4050N, HP4100N, and HP4200N
printers throughout our organization. Up until last week
we seemed fine because many of our corporate users were
printing through Novell NDPS printers. This server is
dying and management decided to turn off NDPS printing.
We are now having print driver / local workstation
permissions / landscape printing issues.

Does anyone happen to know what Registry settings and
folders need what permissions so that the driver from the
server can be downloaded onto the users Windows NT 4.0
system? Also, on the Windows 2000 Print server - is it
possible to have multiple print drivers loaded for the
same type of printer (i.e. we have 2 HP4100N printers, but
want to have an older version of the print driver
associated with one of the printers and the newer one
downloaded from HP site for the other one)? If so, where
are the files stored? It looks to me that if you update
the HP4100N driver for one then both must be updated (%
SystemRoot%\System32\Spool\Drivers\2). If not, how can we
cleanup the print server and the clients system after we
find the drivers that will work for our various models. I
think we have many different drivers loaded both on the
server and on the workstations.

 

[Mikael Horal [MSFT]]

Wayne,
in order to allow NT4 clients to print to your Win2k print server you have
to install NT4 "additional drivers" on your Win2k print server. You can
install an "additional" NT4 driver by right clicking the printer icon in the
"Printers and Faxes" folder. Choose Properties -> Sharing -> Additional
Drivers. Choose the "Windows NT4.0 or 2000 (Intel)" check-box to start
installing driver.

This article discusses this issue in some greater detail:
http://support.microsoft.com/default.aspx?scid=kb;en-us;311985

Please let me know if you have already installed "additional drivers" and
you still see the problems.

It is possible to have one (kernel mode) NT4 driver and another (user mode)
Windows 2000 printer driver installed for the same model. It is however not
possible to have two NT4 drivers or two Win2k drivers of different versions.

Thanks,
Mikael

 

[Wayne]

We have loaded the additional drivers (actually that was
part of the problem because the latest drivers from HP
were not working but this doc helped fix that -
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.j
sp?objectID=bpl13043.

However, we still have an issue because our Security Guru
had the Helpdesk lock down the NT 4.0 Workstations using
an MS Security recommendation
(http://www.microsoft.com/technet/treeview/default.asp?
url=/technet/security/chklist/wrkstchk.asp). I have
changed some of the permissions which has allowed me as a
domain admin to add the printer and the drivers come down
from the server but the user can only add the printer
correctly after a domain admin has already added (I gave
full contol to everyone to the
HKEY_Local_Machine\System\CurrentControlSet\Control\Print\E
nvironments\windows NT x86\Drivers Registry key and Change
control to the folder %SystemRoot% (usually WINNT)\System32
\Spool\Drivers\w32x86 - as already mentioned this allows a
domain admin to add the printer but not a normal Domain
User. I guess the only thing else that I need is to find
out what permissions are needed to what Registry settings,
and folders and if perhaps any of the User Manager for
Domains restrictions is causing the problem (I noticed one
which is Load and unload device drivers)?

Thanks for your initial helpful email!

-----Original Message-----
Wayne,
in order to allow NT4 clients to print to your Win2k print server you have
to install NT4 "additional drivers" on your Win2k print server. You can
install an "additional" NT4 driver by right clicking the printer icon in the
"Printers and Faxes" folder. Choose Properties -> Sharing -> Additional
Drivers. Choose the "Windows NT4.0 or 2000 (Intel)" check- box to start
installing driver.

This article discusses this issue in some greater detail:
http://support.microsoft.com/default.aspx?scid=kb;en- us;311985

Please let me know if you have already

installed "additional drivers" and

 

[Mikael Horal]

Wayne,
when you are talking about domain users not being able to install
printers/drivers, I assume that you mean through Point-and-Print, i.e. when
printing to a server. By design a domain user will not be able to install a
local printer (e.g. one connected via the parallel port - unless it can be
installed through Plug-and-Play). In the following I assume you mean through
Point-and-Print.

Please check to see if you have a registry value AddPrinterDrivers under
HKLM\System\CurrentControlSet\Control\Print\Providers\LanMan Print
Services\Servers. If this value exists and is set to 1, you need to set it
to zero in order to allow domain users to install printers/drivers through
Point-and-Print.

Thanks,
Mikael
--
I've been "encouraged" to share this helpful information from our lawyers.
This posting is provided "AS IS" with no warranties, and confers no rights.
You assume all risk for your use. © 2002 Microsoft Corporation. All rights
reserved.



We have loaded the additional drivers (actually that was
part of the problem because the latest drivers from HP
were not working but this doc helped fix that -
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.j
sp?objectID=bpl13043.

However, we still have an issue because our Security Guru
had the Helpdesk lock down the NT 4.0 Workstations using
an MS Security recommendation
(http://www.microsoft.com/technet/treeview/default.asp?
url=/technet/security/chklist/wrkstchk.asp). I have
changed some of the permissions which has allowed me as a
domain admin to add the printer and the drivers come down
from the server but the user can only add the printer
correctly after a domain admin has already added (I gave
full contol to everyone to the
HKEY_Local_Machine\System\CurrentControlSet\Control\Print\E
nvironments\windows NT x86\Drivers Registry key and Change
control to the folder %SystemRoot% (usually WINNT)\System32
\Spool\Drivers\w32x86 - as already mentioned this allows a
domain admin to add the printer but not a normal Domain
User. I guess the only thing else that I need is to find
out what permissions are needed to what Registry settings,
and folders and if perhaps any of the User Manager for
Domains restrictions is causing the problem (I noticed one
which is Load and unload device drivers)?

Thanks for your initial helpful email!

-----Original Message-----
Wayne,
in order to allow NT4 clients to print to your Win2k print server you have
to install NT4 "additional drivers" on your Win2k print server. You can
install an "additional" NT4 driver by right clicking the printer icon in the
"Printers and Faxes" folder. Choose Properties -> Sharing -> Additional
Drivers. Choose the "Windows NT4.0 or 2000 (Intel)" check- box to start
installing driver.

This article discusses this issue in some greater detail:
http://support.microsoft.com/default.aspx?scid=kb;en- us;311985

Please let me know if you have already

installed "additional drivers" and