Solved

non administrator needs right to install local printer

Posted on 2006-11-28
6
724 Views
Last Modified: 2008-01-09
I am trying to set up a restricted administrator on my windows 2003 single domain, this users must not have the "domain admin" right but must be able to add local printers to a domain controller, I have  tried adding him to the following groups - "server operater" and "print operater".

Can someone please help?

thanks

sharjeel
0
Comment
Question by:sharjeel ashraf
  • 2
6 Comments
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 18033045
try this policu

computer\windows settings\security settings\local policies\security options\Devices: Prevent users from installing printer drivers (D)
0
 
LVL 51

Accepted Solution

by:
Netman66 earned 500 total points
ID: 18033162
You can't.  In order to add printers to a DC, you need to be Admin locally - since that's not possible on a DC you're in a pickle!

You can create a script that runs in the context of Domain Admin then encode it.  The quasi-admin can then use the script.

0
 
LVL 51

Expert Comment

by:Netman66
ID: 18387829
The question has an answer.
0

Featured Post

Complete Microsoft Windows PC® & Mac Backup

Backup and recovery solutions to protect all your PCs & Mac– on-premises or in remote locations. Acronis backs up entire PC or Mac with patented reliable disk imaging technology and you will be able to restore workstations to a new, dissimilar hardware in minutes.

Join & Write a Comment

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now