Solved

Adding a shared printer in Windows 7

Posted on 2011-02-17
12
1,359 Views
Last Modified: 2012-05-11
What seems to be a very easy task has really bugged me since I have started using Win 7.

More specifically, its permissions, in a typical windows domain environment, and adding a shared printer that the client needs drivers for. UAC is always turned off.

In XP, it just works.
In Vista, it prompts you for the admin credentials.
In Win 7, I have to log off, log on as admin, etc...

Is there a settng somewhere that will allow non-admin users to add printers (and drivers) like in XP?
0
Comment
Question by:hongedit
  • 5
  • 4
  • 2
  • +1
12 Comments
 

Accepted Solution

by:
HizShadow earned 167 total points
ID: 34914852
If you need your users to be able to add their own print drivers you will have to use GPO to edit the Driver Installation policy. It is located here:

Computer Configuration\Policies\Administrative Templates\System\Driver Installation

The setting is called "Allow non-administrators to install drivers for these devices setup classes". You will need to add the device class GUID of printers.

I hope that helps
0
 
LVL 5

Expert Comment

by:rdhoore108
ID: 34914875
What Windows version is the computer that is sharing the printer?

We have all our printers shared by a Server 2003, and I don't remember having had any troubles installing the printers on Windows 7 (we've just finished replacing all our pc's by new ones). It did ask for permission (UAC is off here too), but otherwise no problem.
0
 
LVL 1

Author Comment

by:hongedit
ID: 34914984
HizShadow: Thanks for that. How do I find the device class GUID? Is it 1 single ID for all printers, or one for each printer?

rhhoore108: Varies, anything from Win2k3 to Win2k8, sometimes sharing through other PC's, so XP/Vista/7.

Happens the same on all. If logged on as a normal user in Win 7 this is what happens:

1. Connect to printer (either by login script or browsing manually, right click and "Connect"
2. It will say it needs a driver, do I wish to contimue (security alert). Click Yes.
3. It will copy the driver files, and when it reaches the end, it'll fail with a permission error

The only way it will work is if:

A) PC already has relevant driver installed
B) User has admin perms (local or domain)
0
Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

 
LVL 1

Author Comment

by:hongedit
ID: 34915041
Also, cannot for the life of me find that GPO setting: Allow non-administrators to install drivers for these devices setup classes

 GPO List
0
 
LVL 5

Expert Comment

by:rdhoore108
ID: 34915229
Is that from Group Policy Management on your domain controller?
I checked on mine (2008) and it is indeed there...

If you do find it, and you change it, you may need to run gpupdate (from a command prompt) in order to make the change active immediately. And you will need to log off and on on the clients.
0
 
LVL 1

Author Comment

by:hongedit
ID: 34915276
That is from my Win2k3 DC.

I can see on my 2008 server's though...any idea where the equiv is in 2003?

Also, are Device ID's specific to each make, model, or a combination of both?
0
 
LVL 5

Assisted Solution

by:rdhoore108
rdhoore108 earned 166 total points
ID: 34921362
Vendor ID is specific to the make/brand, Device ID is specific to the model. But this is not what HizShadow meant, he was referring to the windows ID's of different classes of devices. See here:

http://xpdrivers.com/troubleshooting/device-class-guids-for-popular-types-of-hardware/

So, the printers would be {4d36e979-e325-11ce-bfc1-08002be10318}.

You will need to install the Group Policy Management Console on an W7 pc. This will allow you to connect to the domain controller but still have the settings needed that are not shown on 2003.

http://social.technet.microsoft.com/Forums/en/w7itpronetworking/thread/0595a187-8c31-44f9-b004-587c0433e0b6

http://www.dslreports.com/forum/r23625449-Windows-7-Group-Policy-under-a-Server-2003
0
 
LVL 5

Expert Comment

by:rdhoore108
ID: 34921379
(I was just clarifying HizShadow's post, as he seems to be away for the moment. I have not done this myself yet.)
0
 
LVL 6

Assisted Solution

by:siht
siht earned 167 total points
ID: 34922912
Windows 7 has a new Group Policy setting which you will need to modify for this to work. Modifying this setting enables the required drivers to be installed at logon under a normal user account. Below is the relevant section of the how to I wrote for myself after battling this issue for a few days.

      16. Log on to a Windows 7 (or later) machine with Microsoft Remote Server Administration tools installed.
      17. Start --> Administrative Tools --> Right click "Group Policy Management" --> Run as administrator.
      18. Right Click the OU where you want the new settings to apply -->  "Create GPO in this domain and link it here"
      19. Name the new GPO "Deploy Printers Policy".
      20. Right Click the new "Deploy Printers Policy" --> Edit
            a. Computer Configuration\Policies\Administrative Templates\Printers\Point and Print Restrictions --> Set to disabled.
                  i. This enables the required drivers to be installed on the client machines at logon.
            b. User Configuration\Preferences\Control Panel Settings\Printers
            c. Right Click Printers --> New --> Shared Printer .
                  i. Action : Update or Create
                  ii. Share Path: Click the browse button and it should appear at the bottom.
                  iii. Click OK.
      21. The new shared printer should now appear on the client machines after the new group policy has applied and the users have logged off and on again.

HTH
Simon.
SBS-2008-NetwirkPrinter-32x64dri.pdf
0
 
LVL 1

Author Comment

by:hongedit
ID: 34925272
Hi Siht

Thank you for that - most helpful indeed!

Does this also allow for users to add printers adhoc, i.e ones that are not defined in GPO or login script?
0
 
LVL 6

Expert Comment

by:siht
ID: 34936982
I'm not sure, we only have a few users and printers so there are no more for them to add. Potentially as you are removing a restriction on users installing drivers, if your environnment warrants it you may want to test it.
0
 
LVL 1

Author Closing Comment

by:hongedit
ID: 34942467
Thank you, worked.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
This Micro Tutorial will teach you the basics of configuring your computer to improve its speed. It will also teach you how to disable programs that are running in the background simultaneously. This will be demonstrated using Windows 7 operating…
This Micro Tutorial will go in depth within Systems and Security in Windows 7 and will go into detail regarding Action Center, Windows Firewall, System, etc. This will be demonstrated using Windows 7 operating system.

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question