?
Solved

Can't add printer drivers to print server as a print operators

Posted on 2011-03-20
5
Medium Priority
?
3,683 Views
Last Modified: 2012-05-11
We have a branch file server which has also been setup as a print server.
Now i want a local user to be able to administer the print server but not have full admin access to the rest of the server.
The machine is running Server 2008 R2 and i've added the user to print operators group etc.

The user can add printers so long as they don't need to add a new printer driver. When they try to install a new printer with a new printer driver the following error message is given.
'Printer driver was not installed. Access is denied'

I did some reading and apparently this error can be related to the user not having write access to C:\Windows\inf where the drivers are actually stored. I tried giving the print operators group write access to this folder and it appeared to work however i got alot of 'access denied' errors with all the inf files currently in the folder. I assumed this was just due to them being in use etc.

Any ideas how i can give a user access to install printers & printer drivers on a Server 2008 R2 machine without giving them full admin access?
0
Comment
Question by:andoss
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 8

Expert Comment

by:ActiveDirectoryman
ID: 35177255

this is due to a change that was made in windows server 2003. print operators and power users by default cannot install printers.

check this out this link for problem resolution:
Members of the Power Users group and of the Print Operators group cannot install local printers on a Windows Server 2003-based member server
http://support.microsoft.com/kb/940724
0
 
LVL 8

Author Comment

by:andoss
ID: 35177351
Thanks looks great, i'll  try it now.
0
 
LVL 8

Author Comment

by:andoss
ID: 35177607
Unfortunately that didn't fix the problem, I'm still unable to add drivers to the server from a user in print operators group.
0
 
LVL 8

Accepted Solution

by:
ActiveDirectoryman earned 2000 total points
ID: 35177631

my apologies I sent you the wrong article.  You have Windows server 2008 R2

check out this article.  This is for Windows Server 2008 R2.
THIS IS WHAT YOU NEED HERE.  SORRY AGAIN FOR THE INCONVENIENCE
Assigning Delegated Print Administrator and Printer Permission Settings in Windows Server 2008 R2
http://technet.microsoft.com/en-us/library/ee524015(WS.10).aspx
0
 
LVL 8

Author Comment

by:andoss
ID: 35177700
Thanks, basically that says that only Administrators can install drivers remotely on a print server.
I need to give the branch user access to connect to the server via remote desktop and they can then install new print drivers.

Print Management can only be used remotely for smaller tasks not installing drivers...

Not ideal but it works, thanks for the help.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
Microsoft Office 365 is a subscriptions based service which includes services like Exchange Online and Skype for business Online. These services integrate with Microsoft's online version of Active Directory called Azure Active Directory.
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Suggested Courses

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question