I need to arrange for a limited number of our desktop engineers to be able to add printers to our 2K3 SP2 DCs.
I've tried a few things with no success.
1. Created separate AD group and placed new group as member of Print Operators
2. Amended the permissions on HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors on each of the DCs to allow Print Operators full control.
3. Changed domain delegate control so that new AD group has full control over print objects
And whenever those users try to add a printer they're still immediately told on double clicking "Add Printer" that they don't have sufficient rights to add printers to <dc name>.
Any ideas where to look from here?