[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now

x
?
Solved

Allow "Non Admin" Domain Users to Install Shared Printers on Windows 7 without Prompting for Administrative Credentials

Posted on 2013-12-19
12
Medium Priority
?
7,068 Views
Last Modified: 2013-12-25
Hello,

I would like to allow "Non Admin" Domain users to install shared printers on Windows 7 without prompting for administrative credentials.  I have looked at multiple posts on the subject here at EE, but I am still having trouble.  We currently have Windows Server 2008 Domain controllers (not 2008 R2) and the clients have Windows 7 Professional.

I have attached a screenshot below of the GPO settings I currently have set in the OU.  I am not sure what I am missing.  The non admin clients are still prompted for admin credentials when trying to connect to a shared printer.  *Note some of these shared printers are on Windows XP desktops.  

Windows GPO Settings for Printing
Any help would be greatly appreciated, thanks,


Randy
0
Comment
Question by:rgutwein
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 5
12 Comments
 
LVL 1

Expert Comment

by:Rapska1ion
ID: 39729129
Remote users permissions on you print server could also affect this. The GPO settings look fine, what are your print server local permissions?
0
 
LVL 5

Author Comment

by:rgutwein
ID: 39729182
Hi Rapska1ion, I have the remote desktop settings turned on, and all of the local policies are set to the default.  Is there a particular one I should look for in the local polices?


Randy
0
 
LVL 1

Expert Comment

by:Rapska1ion
ID: 39729187
Probably stray away from policies for now. Check your local groups and make sure domain users have permissions to remotely connect (but not login of course)
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 

Assisted Solution

by:Callum-
Callum- earned 1000 total points
ID: 39729274
Have you tried running the Group Policy Modelling Wizard?

You may have a policy that is over-riding the settings you posted. Hopefully, the above wizard should point out which one that is.
0
 
LVL 5

Author Comment

by:rgutwein
ID: 39729608
Hi Everyone,

I checked the Group Policy Modeling Wizard and I do not see any of the Group Policies being filtered out.

The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Local Group Policy
            Filtering:  Not Applied (Empty)

I also checked the Local Remote Users group on the PC sharing the printer and manually added the account trying to connect to that shared printer and I get the same result.

I am able to install the shared printer on a Windows XP machine with no issue, it is just the Windows 7 ones want me to enter in the admin credentials.
0
 
LVL 5

Author Comment

by:rgutwein
ID: 39731648
Hi Guys,

Just a follow up, it seems that the GPO settings are correct to some degree.  I did a test where I had a Windows 7 desktop share a printer where the default drivers were already installed (HP 910).  I then had the other Windows 7 desktop with a standard (Non admin user) try to connect to it and it installed without issue.

Now when I try to connect that Windows 7 desktop to the shared printer on a Windows XP machine (with a Dell1130 printer) it looks like it wants to download the drivers from that XP desktop for the printer.  When it completes, then it prompts me for that admin password.  Is there another Group Policy that I am missing that will allow this?

Randy
0
 
LVL 1

Expert Comment

by:Rapska1ion
ID: 39731692
Check your UAC settings on the client. Either bring those settings down or you can try adding domain users to the clients power users group.
0
 
LVL 5

Author Comment

by:rgutwein
ID: 39731750
Thank you Rapska1ion, I turned the UAC to "Never notify (Disable UAC)" but I am still getting prompted to include the admin credentials :(
0
 
LVL 1

Assisted Solution

by:Rapska1ion
Rapska1ion earned 1000 total points
ID: 39731855
Disappointing! There may be an issue with hosting a shared printer from XP to 7 in regards of authorization. You might have to find a work around. I wool do some research for you because now I am curious.
0
 
LVL 5

Accepted Solution

by:
rgutwein earned 0 total points
ID: 39731968
Ok, I finally got this to work!  After doing an exhaustive amount of research, I stumbled up on this:

There are TWO "Point and Print Restrictions" settings
•      Computer Configuration/Policies/Administrative Templates/Printers/Point and Print Restrictions
•      User Configuration/Policies/Administrative Templates/Control Panel/Printers/Point and Print Restrictions

Of these two, the one under Computer Configuration seems to be the important one (Especially for Windows 7 computers). But guess what? The original Server 2008 doesn't include this setting in the list -- you need Server 2008 R2 for this setting to show up.

Now, I only had Window 2008 Domain controllers, and I did not want to mess around with them too much with importing the various settings, so I decided to create a backup domain controller (which is a Windows 2008 R2 server).  Once I got that up and running, I decided to give that "Computer Configuration/Policies/Administrative Templates/Printers/Point and Print Restrictions" a go.  After I did that, everything worked!  I guess Windows 7 machines need that setting, and were ignoring the other ones.  I know creating the backup dc was overkill, and I am sure there are simpler ways to do this, but I wanted to post my settings if anyone else is having this issue.  Thank you for all your help!

Working Windows GPO Settings for Printing

Randy
0
 
LVL 1

Expert Comment

by:Rapska1ion
ID: 39732069
Thanks for posting that Randy. Good luck!
0
 
LVL 5

Author Closing Comment

by:rgutwein
ID: 39738955
I posted the solution and awarded point to all those who helped me get to this point.  Thank you so much, I really appreciate it.


Randy
0

Featured Post

Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introducing Priority Question, our latest feature.
If you're a modern-day technology professional, you may be wondering if certifications are really necessary. They are. Here's why.
This Micro Tutorial will teach you the basics of configuring your computer to improve its speed. It will also teach you how to disable programs that are running in the background simultaneously. This will be demonstrated using Windows 7 operating…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

656 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question