Solved

Allow Windows 7 Users to Update Network Printer Drivers connected to a Server 2003 Domain

Posted on 2010-11-30
10
1,169 Views
Last Modified: 2012-05-10
I am in the middle of deploying Windows 7 computers on a Server 2003 domain and have noticed that the Windows 7 has several more security settings than what is shown in the Windows 2003 Server Active Directory GPO.  For example I am trying to allow the Windows 7 users to update printer drivers without administrative rights, and I think I do this through the Point and Print Security in the GPO, and this option is not on the 2003 Server GPO.

Two part question:  1) How can I allow windows 7 users to update their own printer drivers?  It it is through the "Point and Print" GPO, how can I load this on my Windows 2003 server to configure it?
0
Comment
Question by:shrimpfork
  • 6
  • 3
10 Comments
 
LVL 9

Expert Comment

by:BDoellefeld
ID: 34241836
Yes, your on the right track. The point and print security is what you want.

The difference is, you'll want to edit the GPO using a Windows 7 client and the option will be there. The ADM file will be saved along with the policy.

0
 
LVL 6

Expert Comment

by:FDomingos88
ID: 34241844
I think that they need to be power users, as described in this website http://support.microsoft.com/default.aspx?scid=kb;en-us;297780 .
0
 

Author Comment

by:shrimpfork
ID: 34241876
BDoellefeld,
Please elaborate, how do I edit a 2003 GPO using a Windows 7 client?  I want to avoid going around to 40 windows 7 machines and have the policy set on the 2003 server.

0
 

Author Comment

by:shrimpfork
ID: 34241904
FDomingos88,
My XP users do not have this problem, it is only with the new Windows 7 machines.  Adding then as a power user causes other problems.  I need a GPO setting.
0
 
LVL 9

Accepted Solution

by:
BDoellefeld earned 500 total points
ID: 34262794
Hello.

Your question "Please elaborate, how do I edit a 2003 GPO using a Windows 7 client?  I want to avoid going around to 40 windows 7 machines and have the policy set on the 2003 server."

On a Windows 7 client, install the Windows Remote Server Administration Tools and enable Group Policy Management
Full procedure outlined here: http://www.addictivetips.com/windows-tips/how-to-install-the-group-policy-management-in-windows-7/ 

Once installed, again from the Windows 7 client, create/edit the GPO for the print security. The additional ADMX file that applies will be saved with the policy on the 2003 domain controller, so no need to upload new ADM files.

In my case I created a new GPO specifically for this option and linked it at the domain level. Since the policy only affects options which are available on Windows 7, XP and 2000 clients are unaffected.
0
Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 

Author Comment

by:shrimpfork
ID: 34285212
BDoellefeld,
This looks good.  Give me a day to get this applied...stand by.
0
 

Author Comment

by:shrimpfork
ID: 34343209
BDoellefeld,
I got the GPO applied through a Win 7 client, but the workstations don't seam to be taking the policy.  They still require an admin to change drivers.  Any suggestion?
0
 
LVL 9

Expert Comment

by:BDoellefeld
ID: 34345515
Hi. Here is a screen of the settings I use, maybe check your settings against these. I have no issues.


Win7-PrintGPO.png
0
 

Author Comment

by:shrimpfork
ID: 34347778
I think I got it....but not sure why.  I originally placed the GPO in the OU that hold the computers.  When I moved it over to the OU that hold the users, it seems to work.  I thought it would work in either OU, even since it was a user GPO setting.
0
 

Author Comment

by:shrimpfork
ID: 34347857
I think I got it....but not sure why.  I originally placed the GPO in the OU that hold the computers.  When I moved it over to the OU that hold the users, it seems to work.  I thought it would work in either OU, even since it was a user GPO setting.
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

While working, an annoying popup showing below will come and we cannot cancel or close it form the screen. The error message will come again and again.
On some Windows 7 (SP1) computers, Windows Update becomes super slow even the computer is reasonably fast.  There's one solution that seemed to have worked well for me (after trying a few other suggested solutions).
In this Micro Tutorial viewers will learn how to use Boot Corrector from Paragon Rescue Kit Free to identify and fix the boot problems of Windows 7/8/2012R2 etc. As an example is used Windows 2012R2 which lost its active partition flag (often happen…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now