Re: Domain Users can't map printer port!

From: Karl Levinson [x y] mvp (levinson_k@despammed.com)
Date: 04/03/03 

From: "Karl Levinson [x y] mvp" <levinson_k@despammed.com>
Date: Thu, 3 Apr 2003 10:25:42 -0500

Any chance maybe the RestrictAnonymous registry setting or Group Policy
setting relating to NetBIOS Anonymous Null sessions was changed to "2" or
the highest available setting? Strangely, I understand that setting this on
either the printer share server or the workstation trying to connect could
cause problems.

Maybe using a sniffer might help, or enabling auditing:

http://securityadmin.info/faq.htm#sniffer
http://securityadmin.info/faq.htm#auditing

"Adrian" <element9999@hotmail.com> wrote in message
news:6a5n8v8fn9b2hjseqvrgvj6ecrfhhn51es@4ax.com...
> I can't get domain users to map printer ports for some reason. I
> don't know if this is a security limitation, or a GPO. I allow users
> the right to install printers, but am not sure if my policy to block
> regedit tools is causing this to happen. When attempted from the
> command prompt, the user gets asked for credentials. No matter what
> gets typed in, access is denied. Thanks in advance!
>

Relevant Pages

  • RE: Locking down a TS session
    ... You would apply group policies on the OU the Terminal ... Server is located in. ... This article goes int much more detail, the part about Group Policy loopback ... > down only the TS sessions of my users not the users logging into the domain. ...
    (microsoft.public.windows.terminal_services)
  • Re: minimize startup program
    ... Do you know is this a local or group policy and where is it located? ... > multiple sessions running under the same account is bound to give ... > Why didn't the login script complete? ... Can Manager display ...
    (microsoft.public.win2000.termserv.apps)
  • Re: Timeout after 10 minutes
    ... local Group policy settings should not affect existing sessions, i.e. if you change local gp while there are existing sessions, those sessions will not be affected by the new local gp. ... "Set time limit for disconnected sessions" = 1 Day ... After 10 minutes of idle time the client will disconnect. ...
    (microsoft.public.windows.terminal_services)
  • Re: Applying GP to terminal server sessions
    ... GPO for console: ... Deny Apply Group Policy to REMOTE INTERACTIVE LOGON ... sessions, having those session lock, too, is quite annoying. ...
    (microsoft.public.windows.terminal_services)
  • Re: Domain Users cant map printer port!
    ... > Any chance maybe the RestrictAnonymous registry setting or Group Policy ... exact GPO you meant referring to anonymous null sessions? ...
    (microsoft.public.win2000.security)