Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Allow "Non Admin" Domain Users to Install Shared Printers on Windows 7 without Prompting for Administrative Credentials

Posted on 2013-12-19
12
Medium Priority
?
7,179 Views
Last Modified: 2013-12-25
Hello,

I would like to allow "Non Admin" Domain users to install shared printers on Windows 7 without prompting for administrative credentials.  I have looked at multiple posts on the subject here at EE, but I am still having trouble.  We currently have Windows Server 2008 Domain controllers (not 2008 R2) and the clients have Windows 7 Professional.

I have attached a screenshot below of the GPO settings I currently have set in the OU.  I am not sure what I am missing.  The non admin clients are still prompted for admin credentials when trying to connect to a shared printer.  *Note some of these shared printers are on Windows XP desktops.  

Windows GPO Settings for Printing
Any help would be greatly appreciated, thanks,


Randy
0
Comment
Question by:rgutwein
  • 6
  • 5
12 Comments
 
LVL 1

Expert Comment

by:Rapska1ion
ID: 39729129
Remote users permissions on you print server could also affect this. The GPO settings look fine, what are your print server local permissions?
0
 
LVL 5

Author Comment

by:rgutwein
ID: 39729182
Hi Rapska1ion, I have the remote desktop settings turned on, and all of the local policies are set to the default.  Is there a particular one I should look for in the local polices?


Randy
0
 
LVL 1

Expert Comment

by:Rapska1ion
ID: 39729187
Probably stray away from policies for now. Check your local groups and make sure domain users have permissions to remotely connect (but not login of course)
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 

Assisted Solution

by:Callum-
Callum- earned 1000 total points
ID: 39729274
Have you tried running the Group Policy Modelling Wizard?

You may have a policy that is over-riding the settings you posted. Hopefully, the above wizard should point out which one that is.
0
 
LVL 5

Author Comment

by:rgutwein
ID: 39729608
Hi Everyone,

I checked the Group Policy Modeling Wizard and I do not see any of the Group Policies being filtered out.

The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Local Group Policy
            Filtering:  Not Applied (Empty)

I also checked the Local Remote Users group on the PC sharing the printer and manually added the account trying to connect to that shared printer and I get the same result.

I am able to install the shared printer on a Windows XP machine with no issue, it is just the Windows 7 ones want me to enter in the admin credentials.
0
 
LVL 5

Author Comment

by:rgutwein
ID: 39731648
Hi Guys,

Just a follow up, it seems that the GPO settings are correct to some degree.  I did a test where I had a Windows 7 desktop share a printer where the default drivers were already installed (HP 910).  I then had the other Windows 7 desktop with a standard (Non admin user) try to connect to it and it installed without issue.

Now when I try to connect that Windows 7 desktop to the shared printer on a Windows XP machine (with a Dell1130 printer) it looks like it wants to download the drivers from that XP desktop for the printer.  When it completes, then it prompts me for that admin password.  Is there another Group Policy that I am missing that will allow this?

Randy
0
 
LVL 1

Expert Comment

by:Rapska1ion
ID: 39731692
Check your UAC settings on the client. Either bring those settings down or you can try adding domain users to the clients power users group.
0
 
LVL 5

Author Comment

by:rgutwein
ID: 39731750
Thank you Rapska1ion, I turned the UAC to "Never notify (Disable UAC)" but I am still getting prompted to include the admin credentials :(
0
 
LVL 1

Assisted Solution

by:Rapska1ion
Rapska1ion earned 1000 total points
ID: 39731855
Disappointing! There may be an issue with hosting a shared printer from XP to 7 in regards of authorization. You might have to find a work around. I wool do some research for you because now I am curious.
0
 
LVL 5

Accepted Solution

by:
rgutwein earned 0 total points
ID: 39731968
Ok, I finally got this to work!  After doing an exhaustive amount of research, I stumbled up on this:

There are TWO "Point and Print Restrictions" settings
•      Computer Configuration/Policies/Administrative Templates/Printers/Point and Print Restrictions
•      User Configuration/Policies/Administrative Templates/Control Panel/Printers/Point and Print Restrictions

Of these two, the one under Computer Configuration seems to be the important one (Especially for Windows 7 computers). But guess what? The original Server 2008 doesn't include this setting in the list -- you need Server 2008 R2 for this setting to show up.

Now, I only had Window 2008 Domain controllers, and I did not want to mess around with them too much with importing the various settings, so I decided to create a backup domain controller (which is a Windows 2008 R2 server).  Once I got that up and running, I decided to give that "Computer Configuration/Policies/Administrative Templates/Printers/Point and Print Restrictions" a go.  After I did that, everything worked!  I guess Windows 7 machines need that setting, and were ignoring the other ones.  I know creating the backup dc was overkill, and I am sure there are simpler ways to do this, but I wanted to post my settings if anyone else is having this issue.  Thank you for all your help!

Working Windows GPO Settings for Printing

Randy
0
 
LVL 1

Expert Comment

by:Rapska1ion
ID: 39732069
Thanks for posting that Randy. Good luck!
0
 
LVL 5

Author Closing Comment

by:rgutwein
ID: 39738955
I posted the solution and awarded point to all those who helped me get to this point.  Thank you so much, I really appreciate it.


Randy
0

Featured Post

 [eBook] Windows Nano Server

Download this FREE eBook and learn all you need to get started with Windows Nano Server, including deployment options, remote management
and troubleshooting tips and tricks

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you put your credit card number into a website for an online transaction, surely you know to look for signs of a secure website such as the padlock icon in the web browser or the green address bar.  This is one way to protect yourself from oth…
The Internet has made sending and receiving information online a breeze. But there is also the threat of unauthorized viewing, data tampering, and phoney messages. Surprisingly, a lot of business owners do not fully understand how to use security t…
This Micro Tutorial will give you basic overview of the control panel section on Windows 7. It will depth in Network and Internet, Hardware and Sound, etc. This will be demonstrated using Windows 7 operating system.
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
Suggested Courses

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question