Re: Allow user to add local printer and change time zone





In news:fuOdnV1fo4N0GQXZnZ2dnUVZ_tKdnZ2d@xxxxxxxxxxx,
Steven L Umbach <n9rou@xxxxxxxxxxxxxxxxxxxxxxxxxx> typed:
Hey Lanwench. The following KB article may help that states that the
user must be a power user and have the right to install device
drivers. --- Steve

Thanks, Steve -

Drat. I do tend to leave my laptop users with power user rights...for many
reasons. I would love to avoid it, but <shrug>


http://support.microsoft.com/?kbid=297780

SUMMARY
This article describes the user rights that a user must have to
install or to modify a local printer on a Microsoft Windows XP-based
or Microsoft Windows 2000-based computer.
MORE INFORMATION
To install or to modify a local printer, either of the following
conditions must be true: . You must be logged on as an administrator
or a member of the Administrators group.
. You must be logged on as a member of the Power Users group and
have the Load/Unload Device Drivers user right. The Load/Unload
Device Drivers user right is a Group Policy setting.




"Lanwench [MVP - Exchange]"
<lanwench@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:uB$P%23AMlGHA.4080@xxxxxxxxxxxxxxxxxxxxxxx


In news:167742B3-748F-4E17-BFA0-4F3BCAC2B002@xxxxxxxxxxxxx,
johnisccp <johnisccp@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
Thanks for replying back Lanwench. I already disable Prevent users
from installing printer driver. I am trying to allow them to add a
local printer. The user can add a network printer but for some sale
people they would need to add a local pinter on the road. I
understand what you mean about the timezone.

Did you try the GP setting I mentioned, exactly? You don't need to do
anything to let domain users add *network* printers; that's
permitted by default. I believe the GP stuff referred to will apply
to *local* printers....

And also, you never answered my question about a domain/AD. In
addition to the time change concerns, note that if something is
prohibited via policy "upriver," you can't enable it easily
'downstream'.

Thanks

"Lanwench [MVP - Exchange]" wrote:



In news:B4F03D0D-E2F5-44B8-88F6-0E1C21F30A1F@xxxxxxxxxxxxx,
johnisccp <johnisccp@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
I am trying to lock down the user desktop from installing
software. All of the users are part of the restricted users and I
am OK with that. The problem I am running into is the user can
not add a local printer or change the time zone. Some of our
sale people need to do that since they are always on the road. I
check the local security policy but did not see an option. I
thought giving the permission to change the system time would
allow them to change the time zone but didnt. Any help would be
appreciative.

Are you using AD?

I believe you can use group policy to allow users to install
printers - if you're using AD you should apply this from your
server, but even if you aren't, you can do it on the local computer
policy.

Computer configuration\Windows settings\Security settings\Local
Policies\Security options....
Find "Devices: Prevent users from installing printer drivers"
Tick "Define this policy setting"
and then choose Disabled.


Re the time zone change - I probably wouldn't want to do this
myself. What's the real point? If you use AD and they change the
actual system time, things will get botched when they come back to
the office network. They may not need to actually do this anyway;
if you use Outlook they can change the time zone in there (add
additional time zones to the calendar), for example. That said, you
can go to

Computer configuration\Windows settings\Security settings\Local
Policies\User rights assignment....
Find "Change the system time"
Tick the box to define it, and then add the users/groups you wish.


.



Relevant Pages

  • Add local printer (users and power users)
    ... install a local printer on their machine without admin ... intervention or rights. ... On the other hand power users are able to install the non- ... DRIVERS and SPOOLER folders in the system root\system32. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Allow user to add local printer and change time zone
    ... Well as long as they don't have the user right for to install device drivers ... install or to modify a local printer on a Microsoft Windows XP-based ... not add a local printer or change the time zone. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How to Install Remote Printer?
    ... adding a remote printer to an XP machine: ... install XP drivers etc. ... The problem is that the 'local printer' option is greyed ... If the printer is detected by the wizard, you may not need to select the option to install the drivers as they will be installed during the add printer wizard. ...
    (microsoft.public.windowsxp.hardware)
  • Re: How to Install Remote Printer?
    ... install XP drivers etc. ... The problem is that the 'local printer' option is ... Have you tried installing the drivers using the disk ... machine using the remote printer on the W2k machine then ...
    (microsoft.public.windowsxp.hardware)
  • Re: Local Printer Access
    ... > Basically the printer files just need to be added once by an ... > the drivers from the Printers website and install. ... >> a local printer they cannot because they have no access at all to their ...
    (microsoft.public.windows.server.active_directory)