Re: Allow user to add local printer and change time zone
- From: "Lanwench [MVP - Exchange]" <lanwench@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Tue, 20 Jun 2006 18:59:08 -0400
In news:167742B3-748F-4E17-BFA0-4F3BCAC2B002@xxxxxxxxxxxxx,
johnisccp <johnisccp@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
Thanks for replying back Lanwench. I already disable Prevent users
from installing printer driver. I am trying to allow them to add a
local printer. The user can add a network printer but for some sale
people they would need to add a local pinter on the road. I
understand what you mean about the timezone.
Did you try the GP setting I mentioned, exactly? You don't need to do
anything to let domain users add *network* printers; that's permitted by
default. I believe the GP stuff referred to will apply to *local*
printers....
And also, you never answered my question about a domain/AD. In addition to
the time change concerns, note that if something is prohibited via policy
"upriver," you can't enable it easily 'downstream'.
Thanks
"Lanwench [MVP - Exchange]" wrote:
In news:B4F03D0D-E2F5-44B8-88F6-0E1C21F30A1F@xxxxxxxxxxxxx,
johnisccp <johnisccp@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
I am trying to lock down the user desktop from installing software.
All of the users are part of the restricted users and I am OK with
that. The problem I am running into is the user can not add a local
printer or change the time zone. Some of our sale people need to do
that since they are always on the road. I check the local security
policy but did not see an option. I thought giving the permission
to change the system time would allow them to change the time zone
but didnt. Any help would be appreciative.
Are you using AD?
I believe you can use group policy to allow users to install
printers - if you're using AD you should apply this from your
server, but even if you aren't, you can do it on the local computer
policy.
Computer configuration\Windows settings\Security settings\Local
Policies\Security options....
Find "Devices: Prevent users from installing printer drivers"
Tick "Define this policy setting"
and then choose Disabled.
Re the time zone change - I probably wouldn't want to do this
myself. What's the real point? If you use AD and they change the
actual system time, things will get botched when they come back to
the office network. They may not need to actually do this anyway; if
you use Outlook they can change the time zone in there (add
additional time zones to the calendar), for example. That said, you
can go to
Computer configuration\Windows settings\Security settings\Local
Policies\User rights assignment....
Find "Change the system time"
Tick the box to define it, and then add the users/groups you wish.
.
- Follow-Ups:
- Re: Allow user to add local printer and change time zone
- From: Steven L Umbach
- Re: Allow user to add local printer and change time zone
- References:
- Re: Allow user to add local printer and change time zone
- From: Lanwench [MVP - Exchange]
- Re: Allow user to add local printer and change time zone
- Prev by Date: reset local group policy back to defaults on XP Pro via command line
- Next by Date: Re: Allow user to add local printer and change time zone
- Previous by thread: Re: Allow user to add local printer and change time zone
- Next by thread: Re: Allow user to add local printer and change time zone
- Index(es):
Relevant Pages
|