Solved

Allow Windows 7 Users to Update Network Printer Drivers connected to a Server 2003 Domain

Posted on 2010-11-30
10
1,170 Views
Last Modified: 2012-05-10
I am in the middle of deploying Windows 7 computers on a Server 2003 domain and have noticed that the Windows 7 has several more security settings than what is shown in the Windows 2003 Server Active Directory GPO.  For example I am trying to allow the Windows 7 users to update printer drivers without administrative rights, and I think I do this through the Point and Print Security in the GPO, and this option is not on the 2003 Server GPO.

Two part question:  1) How can I allow windows 7 users to update their own printer drivers?  It it is through the "Point and Print" GPO, how can I load this on my Windows 2003 server to configure it?
0
Comment
Question by:shrimpfork
  • 6
  • 3
10 Comments
 
LVL 9

Expert Comment

by:BDoellefeld
ID: 34241836
Yes, your on the right track. The point and print security is what you want.

The difference is, you'll want to edit the GPO using a Windows 7 client and the option will be there. The ADM file will be saved along with the policy.

0
 
LVL 6

Expert Comment

by:FDomingos88
ID: 34241844
I think that they need to be power users, as described in this website http://support.microsoft.com/default.aspx?scid=kb;en-us;297780 .
0
 

Author Comment

by:shrimpfork
ID: 34241876
BDoellefeld,
Please elaborate, how do I edit a 2003 GPO using a Windows 7 client?  I want to avoid going around to 40 windows 7 machines and have the policy set on the 2003 server.

0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 

Author Comment

by:shrimpfork
ID: 34241904
FDomingos88,
My XP users do not have this problem, it is only with the new Windows 7 machines.  Adding then as a power user causes other problems.  I need a GPO setting.
0
 
LVL 9

Accepted Solution

by:
BDoellefeld earned 500 total points
ID: 34262794
Hello.

Your question "Please elaborate, how do I edit a 2003 GPO using a Windows 7 client?  I want to avoid going around to 40 windows 7 machines and have the policy set on the 2003 server."

On a Windows 7 client, install the Windows Remote Server Administration Tools and enable Group Policy Management
Full procedure outlined here: http://www.addictivetips.com/windows-tips/how-to-install-the-group-policy-management-in-windows-7/ 

Once installed, again from the Windows 7 client, create/edit the GPO for the print security. The additional ADMX file that applies will be saved with the policy on the 2003 domain controller, so no need to upload new ADM files.

In my case I created a new GPO specifically for this option and linked it at the domain level. Since the policy only affects options which are available on Windows 7, XP and 2000 clients are unaffected.
0
 

Author Comment

by:shrimpfork
ID: 34285212
BDoellefeld,
This looks good.  Give me a day to get this applied...stand by.
0
 

Author Comment

by:shrimpfork
ID: 34343209
BDoellefeld,
I got the GPO applied through a Win 7 client, but the workstations don't seam to be taking the policy.  They still require an admin to change drivers.  Any suggestion?
0
 
LVL 9

Expert Comment

by:BDoellefeld
ID: 34345515
Hi. Here is a screen of the settings I use, maybe check your settings against these. I have no issues.


Win7-PrintGPO.png
0
 

Author Comment

by:shrimpfork
ID: 34347778
I think I got it....but not sure why.  I originally placed the GPO in the OU that hold the computers.  When I moved it over to the OU that hold the users, it seems to work.  I thought it would work in either OU, even since it was a user GPO setting.
0
 

Author Comment

by:shrimpfork
ID: 34347857
I think I got it....but not sure why.  I originally placed the GPO in the OU that hold the computers.  When I moved it over to the OU that hold the users, it seems to work.  I thought it would work in either OU, even since it was a user GPO setting.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

When you try to extract and to view the contents of a Microsoft Update Standalone Package (MSU) for Windows Vista, you cannot extract the files from the MSU. Here we are going to explain how to extract those hotfix details without using any third pa…
This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This Micro Tutorial will teach you the basics of configuring your computer to improve its speed. It will also teach you how to disable programs that are running in the background simultaneously. This will be demonstrated using Windows 7 operating…
This Micro Tutorial will give you basic overview of the control panel section on Windows 7. It will depth in Network and Internet, Hardware and Sound, etc. This will be demonstrated using Windows 7 operating system.

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question