non administrator needs right to install local printer

I am trying to set up a restricted administrator on my windows 2003 single domain, this users must not have the "domain admin" right but must be able to add local printers to a domain controller, I have  tried adding him to the following groups - "server operater" and "print operater".

Can someone please help?

thanks

sharjeel
LVL 6
sharjeel ashrafSenior Network EngineerAsked:
Who is Participating?
 
Netman66Connect With a Mentor Commented:
You can't.  In order to add printers to a DC, you need to be Admin locally - since that's not possible on a DC you're in a pickle!

You can create a script that runs in the context of Domain Admin then encode it.  The quasi-admin can then use the script.

0
 
Jay_Jay70Commented:
try this policu

computer\windows settings\security settings\local policies\security options\Devices: Prevent users from installing printer drivers (D)
0
 
Netman66Commented:
The question has an answer.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.