Solved

non administrator needs right to install local printer

Posted on 2006-11-28
6
730 Views
Last Modified: 2008-01-09
I am trying to set up a restricted administrator on my windows 2003 single domain, this users must not have the "domain admin" right but must be able to add local printers to a domain controller, I have  tried adding him to the following groups - "server operater" and "print operater".

Can someone please help?

thanks

sharjeel
0
Comment
Question by:sharjeel ashraf
  • 2
6 Comments
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 18033045
try this policu

computer\windows settings\security settings\local policies\security options\Devices: Prevent users from installing printer drivers (D)
0
 
LVL 51

Accepted Solution

by:
Netman66 earned 500 total points
ID: 18033162
You can't.  In order to add printers to a DC, you need to be Admin locally - since that's not possible on a DC you're in a pickle!

You can create a script that runs in the context of Domain Admin then encode it.  The quasi-admin can then use the script.

0
 
LVL 51

Expert Comment

by:Netman66
ID: 18387829
The question has an answer.
0

Featured Post

U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Unknown AD user under VMWare OU 4 71
What is this Task? 4 148
DHCP lease duration / Migration 8 91
Access denied running PowerPivot -SQL Server 2014 on Windows Server 2012 10 57
I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
Recently, I had the need to build a standalone system to run a point-of-sale system. I’m running this on a low-voltage Atom processor, so I wanted a light-weight operating system, but still needed Windows. I chose to use Microsoft Windows Server 200…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question