Users need printer and driver install rights

G

Guest

I have 350 xp laptops in domain environment and I am having a problem. I
can't find aywhere within XP or group policy on Windows 2000 server to give
these network users printer and hardware install rights. Can anybody help????
 
G

Guest

It is not a matter of network or local printers. The users are in a domain
environment during the day, but need to be able to add their own home printer
to XP so that they can print when home. The get errors saying that they don't
have the proper permissions to do this. We can't make them local admins of
the laptops to solve this and I am looking for another way.
 
M

Malke

mjb765 said:
It is not a matter of network or local printers. The users are in a
domain environment during the day, but need to be able to add their
own home printer to XP so that they can print when home. The get
errors saying that they don't have the proper permissions to do this.
We can't make them local admins of the laptops to solve this and I am

I'm not a domain expert by any means, but MVP Lanwench addressed using
company (domain) laptops in a home network as follows:

"Note - you don't need to change to a workgroup just to access resources
on it. You shouldn't play with your laptop's network settings at all.
Once you've logged in using your domain account (using cached
credentials), and have an IP address on the home network, you can map
drives, use printers, whatnot, very easily - one way, in a command
line:

net use x: \\computername\sharename /user:computername\username <enter>"

So maybe this would solve your problem?

Malke
 
G

Guest

When the user is home and the local printer is plugged in Windows XP wants to
install on the local machine but can't because the logged on user(domain user
logged on with cached profile) does not have install rights on the local
machine. All I want to do is find the setting somewhere that will allow the
"regular" user to install hardware connected directly to the local machine.
 
M

marco

mjb765 said:
When the user is home and the local printer is plugged in Windows XP wants
to
install on the local machine but can't because the logged on user(domain
user
logged on with cached profile) does not have install rights on the local
machine. All I want to do is find the setting somewhere that will allow
the
"regular" user to install hardware connected directly to the local
machine.
Mike

most printers, even if they have signed drivers, have what is known as as
client-side setup which require admins privs; more specifically, it requires
the user to be part of the group Administrators and have the SeLoadDrivers
privilege. This unfortunately cannot be managed without third-party tools.
If investing $8.75 per computer is something you are willing to consider
then you may want to give a try to our own solution, NeoExec for Active
Directory, atry. FYI, NeoExec/AD allows the managing of security groups and
privileges on a per-application basis.

If interested then please do get in touch with me at marco [at] neovalens
[ dot ] com

cheers,

Marco
www.neovalens.com
 
G

Guest

Not sure if this will work, but what about caching the last logon, then
opening up security to allow them to install printer drivers

marco said:
mjb765 said:
When the user is home and the local printer is plugged in Windows XP wants
to
install on the local machine but can't because the logged on user(domain
user
logged on with cached profile) does not have install rights on the local
machine. All I want to do is find the setting somewhere that will allow
the
"regular" user to install hardware connected directly to the local
machine.
Mike

most printers, even if they have signed drivers, have what is known as as
client-side setup which require admins privs; more specifically, it requires
the user to be part of the group Administrators and have the SeLoadDrivers
privilege. This unfortunately cannot be managed without third-party tools.
If investing $8.75 per computer is something you are willing to consider
then you may want to give a try to our own solution, NeoExec for Active
Directory, atry. FYI, NeoExec/AD allows the managing of security groups and
privileges on a per-application basis.

If interested then please do get in touch with me at marco [at] neovalens
[ dot ] com

cheers,

Marco
www.neovalens.com
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top