?
Solved

IIS 5.0 Printing - Non Admin Users Install Refused

Posted on 2003-03-20
10
Medium Priority
?
620 Views
Last Modified: 2012-08-14
** Forgive phrases used as I am not familiar with IIS - picking up the pieces from a departed colleague **
The ability for standard domain users to install printers has been lost.

Using the webpage printing selection screen, only administrators can 'connect' (install) printers.

Normal domain users get as far as clicking on 'connect', a dialogue box appears asking if they wish to install it. After they click OK they get the message -

"Printer Installation Failed You do not have enough privilege to complete the printer installation on the local machine."

This DID work ok. I believe SP3 has recently been applied to our print server. Additionally the print server is in a different domain to to our users but so am I as an administrator.
I have tinkered around with some of the directory permissions etc under IIS but to no avail.


Any suggestions gratefully accepted.
0
Comment
Question by:masefield
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 5
10 Comments
 
LVL 34

Expert Comment

by:arbert
ID: 8181938
That's an error from the local box.

 What permissions do these users have--they have to have explicit permissions to be able to install new printers and hardware....
This isn't and IIS issue....


Brett
0
 

Author Comment

by:masefield
ID: 8182028
These users are all members of a general NT group that has "Load and Unload Device Drivers" privilege.

I did wonder if it was a local problem but couldn't understand why it have a blanket effect?
0
 
LVL 34

Expert Comment

by:arbert
ID: 8182106
Can you change one user to be a LOCAL admin of the machine and see what happens?

Brett
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 

Author Comment

by:masefield
ID: 8193841
Yep, that worked.

I realise this mean that IIS is seemingly not the culprit, but it still puzzles me why on an NT network (hundreds of users) normal domain users would suddenly lose the blanket ability to add printers.

Would this function be in a group policy or something?

As I mentioned before all our standard domain users are members of an NT group that allows them 'load unload driver' abilities.

Any ideas?
0
 
LVL 34

Expert Comment

by:arbert
ID: 8195199
Yep, this could definately be a group policy--has someone been playing with policy editor???

Do you guys run SMS in your shop?

Brett
0
 

Author Comment

by:masefield
ID: 8195468
No SMS here I'm afraid.

NT 4.0 servers for logon and file shares and some 2K's for other things.

From the PDC I tried using the Policy editor to open the config.pol that's in the NETLOGON directory. Unfortunately it came back with an error saying - 'cannot open that file it's not in registry format' etc.

It would appear the file is corrupt, hence the loss of policy priviliges?

It looks as though I might have to go through the backups or create a new file!!
0
 
LVL 34

Expert Comment

by:arbert
ID: 8195478
Yep, that's what it sounds like.  Are there any errors in the servers Event or Application log?

brett
0
 

Author Comment

by:masefield
ID: 8195737
Nothing there as far I can see....

Reading Microsoft KB article 231422, it says you can make standard domain users admins of their machines by following those steps?

Advisable?


0
 
LVL 34

Accepted Solution

by:
arbert earned 800 total points
ID: 8195796
Don't ask me lol :)

All depends on what your company's security policies are.  Do you want people to be able to install and remove software?  Add new devices (modems, external storage they bring from home)....

Most of the environments I've worked in have let "power users" or developers be local admins, but usually not the entire user population.

Brett
0
 

Author Comment

by:masefield
ID: 8195877
I see. It allows full admin function on the workstation.

You're right, we wouldn't wan't that really.

A colleague informs me as far as he can remember the Group Policy didn't have all that much in it. So it looks as though it'll be a piece of cake to create a new one (famous last words)

Thanks for all your advice Brett.
0

Featured Post

Veeam Task Manager for Hyper-V

Task Manager for Hyper-V provides critical information that allows you to monitor Hyper-V performance by displaying real-time views of CPU and memory at the individual VM-level, so you can quickly identify which VMs are using host resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A phishing scam that claims a recipient’s credit card details have been “suspended” is the latest trend in spoof emails.
Preparing an email is something we should all take special care with – especially when the email is for somebody you may not know very well. The pressures of everyday working life stacked with a hectic office environment can make this a real challen…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
Have you created a query with information for a calendar? ... and then, abra-cadabra, the calendar is done?! I am going to show you how to make that happen. Visualize your data!  ... really see it To use the code to create a calendar from a q…
Suggested Courses
Course of the Month9 days, 1 hour left to enroll

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question