Re: Allow user to add local printer and change time zone

Hey Lanwench. The following KB article may help that states that the user
must be a power user and have the right to install device drivers. ---
Steve

http://support.microsoft.com/?kbid=297780

SUMMARY
This article describes the user rights that a user must have to install or
to modify a local printer on a Microsoft Windows XP-based or Microsoft
Windows 2000-based computer.
MORE INFORMATION
To install or to modify a local printer, either of the following conditions
must be true: . You must be logged on as an administrator or a member of the
Administrators group.
. You must be logged on as a member of the Power Users group and have
the Load/Unload Device Drivers user right. The Load/Unload Device Drivers
user right is a Group Policy setting.




"Lanwench [MVP - Exchange]"
<lanwench@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:uB$P%23AMlGHA.4080@xxxxxxxxxxxxxxxxxxxxxxx


In news:167742B3-748F-4E17-BFA0-4F3BCAC2B002@xxxxxxxxxxxxx,
johnisccp <johnisccp@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
Thanks for replying back Lanwench. I already disable Prevent users
from installing printer driver. I am trying to allow them to add a
local printer. The user can add a network printer but for some sale
people they would need to add a local pinter on the road. I
understand what you mean about the timezone.

Did you try the GP setting I mentioned, exactly? You don't need to do
anything to let domain users add *network* printers; that's permitted by
default. I believe the GP stuff referred to will apply to *local*
printers....

And also, you never answered my question about a domain/AD. In addition to
the time change concerns, note that if something is prohibited via policy
"upriver," you can't enable it easily 'downstream'.



Thanks

"Lanwench [MVP - Exchange]" wrote:



In news:B4F03D0D-E2F5-44B8-88F6-0E1C21F30A1F@xxxxxxxxxxxxx,
johnisccp <johnisccp@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
I am trying to lock down the user desktop from installing software.
All of the users are part of the restricted users and I am OK with
that. The problem I am running into is the user can not add a local
printer or change the time zone. Some of our sale people need to do
that since they are always on the road. I check the local security
policy but did not see an option. I thought giving the permission
to change the system time would allow them to change the time zone
but didnt. Any help would be appreciative.

Are you using AD?

I believe you can use group policy to allow users to install
printers - if you're using AD you should apply this from your
server, but even if you aren't, you can do it on the local computer
policy.

Computer configuration\Windows settings\Security settings\Local
Policies\Security options....
Find "Devices: Prevent users from installing printer drivers"
Tick "Define this policy setting"
and then choose Disabled.


Re the time zone change - I probably wouldn't want to do this
myself. What's the real point? If you use AD and they change the
actual system time, things will get botched when they come back to
the office network. They may not need to actually do this anyway; if
you use Outlook they can change the time zone in there (add
additional time zones to the calendar), for example. That said, you
can go to

Computer configuration\Windows settings\Security settings\Local
Policies\User rights assignment....
Find "Change the system time"
Tick the box to define it, and then add the users/groups you wish.




.

Relevant Pages

  • Re: Allow user to add local printer and change time zone
    ... Well as long as they don't have the user right for to install device drivers ... install or to modify a local printer on a Microsoft Windows XP-based ... not add a local printer or change the time zone. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: UAC and USB ports - Standard User
    ... standard users on Vista should be able to access removable drives; although this can be disabled in the Local Security policy. ... The first time you put a USB drive into a Vista machine, the system will install a device driver and create Registry entries for new device. ... you can allow users to install device drivers for specific hardware devices. ... If the device driver for the USB drive has already been installed, and Vista still throws up a UAC prompt every time the user inserts it, then ... ...
    (microsoft.public.windows.vista.general)
  • Re: install SBS2003 Trial - Update, reboot = "Expired"
    ... I only remember the time zone. ... I tarted install on 7/23 and after windowsupdate date was 5/23. ... did so and then after a reboot I got to a login screen - saw the To do list and I shutdown and rebooted twice - just to see if all was OK with that error message. ... Debugging Tools for Windows - Overview ...
    (microsoft.public.windows.server.sbs)
  • Re: Allow user to add local printer and change time zone
    ... install or to modify a local printer on a Microsoft Windows XP-based ... have the Load/Unload Device Drivers user right. ... not add a local printer or change the time zone. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Windows and Office Updates
    ... > Windows Update indicates that my PC should have? ... hardware, device drivers, and applications on any given PC, it's ... you needn't install them. ... applet to uninstall the troublesome hotfix. ...
    (microsoft.public.officeupdate)