?
Solved

Allow Windows 7 Users to Update Network Printer Drivers connected to a Server 2003 Domain

Posted on 2010-11-30
10
Medium Priority
?
1,175 Views
Last Modified: 2012-05-10
I am in the middle of deploying Windows 7 computers on a Server 2003 domain and have noticed that the Windows 7 has several more security settings than what is shown in the Windows 2003 Server Active Directory GPO.  For example I am trying to allow the Windows 7 users to update printer drivers without administrative rights, and I think I do this through the Point and Print Security in the GPO, and this option is not on the 2003 Server GPO.

Two part question:  1) How can I allow windows 7 users to update their own printer drivers?  It it is through the "Point and Print" GPO, how can I load this on my Windows 2003 server to configure it?
0
Comment
Question by:shrimpfork
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 3
10 Comments
 
LVL 9

Expert Comment

by:BDoellefeld
ID: 34241836
Yes, your on the right track. The point and print security is what you want.

The difference is, you'll want to edit the GPO using a Windows 7 client and the option will be there. The ADM file will be saved along with the policy.

0
 
LVL 6

Expert Comment

by:FDomingos88
ID: 34241844
I think that they need to be power users, as described in this website http://support.microsoft.com/default.aspx?scid=kb;en-us;297780 .
0
 

Author Comment

by:shrimpfork
ID: 34241876
BDoellefeld,
Please elaborate, how do I edit a 2003 GPO using a Windows 7 client?  I want to avoid going around to 40 windows 7 machines and have the policy set on the 2003 server.

0
Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 

Author Comment

by:shrimpfork
ID: 34241904
FDomingos88,
My XP users do not have this problem, it is only with the new Windows 7 machines.  Adding then as a power user causes other problems.  I need a GPO setting.
0
 
LVL 9

Accepted Solution

by:
BDoellefeld earned 2000 total points
ID: 34262794
Hello.

Your question "Please elaborate, how do I edit a 2003 GPO using a Windows 7 client?  I want to avoid going around to 40 windows 7 machines and have the policy set on the 2003 server."

On a Windows 7 client, install the Windows Remote Server Administration Tools and enable Group Policy Management
Full procedure outlined here: http://www.addictivetips.com/windows-tips/how-to-install-the-group-policy-management-in-windows-7/ 

Once installed, again from the Windows 7 client, create/edit the GPO for the print security. The additional ADMX file that applies will be saved with the policy on the 2003 domain controller, so no need to upload new ADM files.

In my case I created a new GPO specifically for this option and linked it at the domain level. Since the policy only affects options which are available on Windows 7, XP and 2000 clients are unaffected.
0
 

Author Comment

by:shrimpfork
ID: 34285212
BDoellefeld,
This looks good.  Give me a day to get this applied...stand by.
0
 

Author Comment

by:shrimpfork
ID: 34343209
BDoellefeld,
I got the GPO applied through a Win 7 client, but the workstations don't seam to be taking the policy.  They still require an admin to change drivers.  Any suggestion?
0
 
LVL 9

Expert Comment

by:BDoellefeld
ID: 34345515
Hi. Here is a screen of the settings I use, maybe check your settings against these. I have no issues.


Win7-PrintGPO.png
0
 

Author Comment

by:shrimpfork
ID: 34347778
I think I got it....but not sure why.  I originally placed the GPO in the OU that hold the computers.  When I moved it over to the OU that hold the users, it seems to work.  I thought it would work in either OU, even since it was a user GPO setting.
0
 

Author Comment

by:shrimpfork
ID: 34347857
I think I got it....but not sure why.  I originally placed the GPO in the OU that hold the computers.  When I moved it over to the OU that hold the users, it seems to work.  I thought it would work in either OU, even since it was a user GPO setting.
0

Featured Post

Get your Disaster Recovery as a Service basics

Disaster Recovery as a Service is one go-to solution that revolutionizes DR planning. Implementing DRaaS could be an efficient process, easily accessible to non-DR experts. Learn about monitoring, testing, executing failovers and failbacks to ensure a "healthy" DR environment.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A hard and fast method for reducing Active Directory Administrators members.
In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Suggested Courses

741 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question