Printer Install Permissions

The scenario is a server 2008 R2 domain with Win 7 workstations.  Only admins can install printers and other software.  Even when I set the local user account with administrator permissions, the local user still can't install software  or printers - it takes a domain admin to get it done. Is there any way to apply permissions to a given domain user account that would give this one user the ability to install printers and software but not have the ability to access others' data files?
CTSLAAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

JAN PAKULAICT Infranstructure ManagerCommented:
1 in group policy management do that

“User Configuration\Policies\Administrative Templates: …\Control Panel\Printers”, double-click on Point and Print Restrictions in the right hand pane and set it to Disabled. Click OK to save the changes
(make sure that this group policy is applied)
2 Computer Configuration -> Policies -> Windows Settings -> Security Settings ->
-> Local Policies -> Security Options
and change Devices: Prevent users from installing printer drivers setting to disabled.

3Computer Configuration -> Policies -> Administrative Templates -> System ->
Driver Installation
and edit Allow non-administrators to install drivers for these device setup classes setting.
click show and add these classes

{4d36e979-e325-11ce-bfc1-08002be10318}
{4658ee7e-f050-11d1-b6bd-00c04fa372a7}

save setting

PS

all classes available here

https://msdn.microsoft.com/en-us/library/ff553426(v=VS.85).aspx
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
CTSLAAuthor Commented:
This sounds like just what I needed.  I'll reply again after I've tried it out.  Thank you.
0
CTSLAAuthor Commented:
I found my way through step 1 and 2, but it seems the GPO for step 3 is not accessible on Server 2003.  It looks like I have to deploy RSAT and GPMC on a Windows 7 machine to have the ability to "allow non administrators to install drivers ...".  Please let me know if there's another way to do this.  Thank you for your assistance.
0
JAN PAKULAICT Infranstructure ManagerCommented:
yes you will have to do it as server 2003 will not have updated gpos

you will need rsat on windows 7 with enabled group policy management (under control panel --> programs and features make sure you enable it)

and central store for gpos

https://angrytechnician.wordpress.com/2009/11/05/the-angry-technicians-guide-to-managing-windows-7-you-idiots/


windows server 2003 support ends @ 7/14/2015 - so quickly think about update
https://support.microsoft.com/en-us/lifecycle/search/default.aspx?alpha=Windows%20Server%202003%20R2
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.