Re: Allow user to add local printer and change time zone

Well as long as they don't have the user right for to install device drivers
then they should not be able to install printers if that is an issue. Laptop
users are a difficult case and you have to do what you have to do and
Software Restriction Policies via computer configuration can help lock them
down. Hope all is going well your way. --- Steve


"Lanwench [MVP - Exchange]"
<lanwench@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:O6NKrwhlGHA.3816@xxxxxxxxxxxxxxxxxxxxxxx


In news:fuOdnV1fo4N0GQXZnZ2dnUVZ_tKdnZ2d@xxxxxxxxxxx,
Steven L Umbach <n9rou@xxxxxxxxxxxxxxxxxxxxxxxxxx> typed:
Hey Lanwench. The following KB article may help that states that the
user must be a power user and have the right to install device
drivers. --- Steve

Thanks, Steve -

Drat. I do tend to leave my laptop users with power user rights...for many
reasons. I would love to avoid it, but <shrug>


http://support.microsoft.com/?kbid=297780

SUMMARY
This article describes the user rights that a user must have to
install or to modify a local printer on a Microsoft Windows XP-based
or Microsoft Windows 2000-based computer.
MORE INFORMATION
To install or to modify a local printer, either of the following
conditions must be true: . You must be logged on as an administrator
or a member of the Administrators group.
. You must be logged on as a member of the Power Users group and
have the Load/Unload Device Drivers user right. The Load/Unload
Device Drivers user right is a Group Policy setting.




"Lanwench [MVP - Exchange]"
<lanwench@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:uB$P%23AMlGHA.4080@xxxxxxxxxxxxxxxxxxxxxxx


In news:167742B3-748F-4E17-BFA0-4F3BCAC2B002@xxxxxxxxxxxxx,
johnisccp <johnisccp@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
Thanks for replying back Lanwench. I already disable Prevent users
from installing printer driver. I am trying to allow them to add a
local printer. The user can add a network printer but for some sale
people they would need to add a local pinter on the road. I
understand what you mean about the timezone.

Did you try the GP setting I mentioned, exactly? You don't need to do
anything to let domain users add *network* printers; that's
permitted by default. I believe the GP stuff referred to will apply
to *local* printers....

And also, you never answered my question about a domain/AD. In
addition to the time change concerns, note that if something is
prohibited via policy "upriver," you can't enable it easily
'downstream'.

Thanks

"Lanwench [MVP - Exchange]" wrote:



In news:B4F03D0D-E2F5-44B8-88F6-0E1C21F30A1F@xxxxxxxxxxxxx,
johnisccp <johnisccp@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
I am trying to lock down the user desktop from installing
software. All of the users are part of the restricted users and I
am OK with that. The problem I am running into is the user can
not add a local printer or change the time zone. Some of our
sale people need to do that since they are always on the road. I
check the local security policy but did not see an option. I
thought giving the permission to change the system time would
allow them to change the time zone but didnt. Any help would be
appreciative.

Are you using AD?

I believe you can use group policy to allow users to install
printers - if you're using AD you should apply this from your
server, but even if you aren't, you can do it on the local computer
policy.

Computer configuration\Windows settings\Security settings\Local
Policies\Security options....
Find "Devices: Prevent users from installing printer drivers"
Tick "Define this policy setting"
and then choose Disabled.


Re the time zone change - I probably wouldn't want to do this
myself. What's the real point? If you use AD and they change the
actual system time, things will get botched when they come back to
the office network. They may not need to actually do this anyway;
if you use Outlook they can change the time zone in there (add
additional time zones to the calendar), for example. That said, you
can go to

Computer configuration\Windows settings\Security settings\Local
Policies\User rights assignment....
Find "Change the system time"
Tick the box to define it, and then add the users/groups you wish.




.

Relevant Pages

  • Re: Allow user to add local printer and change time zone
    ... must be a power user and have the right to install device drivers. ... user right is a Group Policy setting. ... printer or change the time zone. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Allow user to add local printer and change time zone
    ... install or to modify a local printer on a Microsoft Windows XP-based ... have the Load/Unload Device Drivers user right. ... not add a local printer or change the time zone. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: printer when using RDP
    ... When installing the printer on SBS, I assume you install as a local printer ... > When you select the option and connect, the remote workstation will detect ...
    (microsoft.public.windows.server.sbs)
  • Re: install SBS2003 Trial - Update, reboot = "Expired"
    ... I only remember the time zone. ... I tarted install on 7/23 and after windowsupdate date was 5/23. ... did so and then after a reboot I got to a login screen - saw the To do list and I shutdown and rebooted twice - just to see if all was OK with that error message. ... Debugging Tools for Windows - Overview ...
    (microsoft.public.windows.server.sbs)
  • Re: Windows and Office Updates
    ... > Windows Update indicates that my PC should have? ... hardware, device drivers, and applications on any given PC, it's ... you needn't install them. ... applet to uninstall the troublesome hotfix. ...
    (microsoft.public.officeupdate)