Sign in
 
HomeLibraryWikiLearnGalleryDownloadsSupportForumsBlogs

none
How configure GPO to allow user install printer driver without administrative in window server 2003 for windows xp client?

 > 

    Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    On windows 2008 and windows 7 machine there is a GPO  Computer Configuration\Administrative Template\System\Driver Installation\Allow non-administrator to install drivers but not in windows server 2003 to accomplish the result for windows xp client.

    Regard,

    Thanks.

    Thursday, August 29, 2013 6:54 PM
    |
    |

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello,

    please see "Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options\Devices: Prevent users from installing printer drivers "

    GPO questions are better asked in http://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserverGP&sort=lastpostdesc&brandIgnore=true&page=1

    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

    Friday, August 30, 2013 6:50 AM
    |
    |
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi, please see that post.

    Meinolf was in the right path, but you miss some settings

    Like Sergey's told;

    Computer Configuration
    Policies
    Windows Settings
      Security Settings
       Devices: Prevent users from installing printer drivers: Disabled
    Administrative Templates
      Printers
       Point and Print Restrictions: Enabled
       Users can only point and print to these servers: Disabled
       Users can only point and print to machines in their forest Enabled

       Security Prompts:
       When installing drivers for a new connection: Do not show warning or elevation prompt
       When updating drivers for an existing connection: Do not show warning or elevation prompt

       System/Driver Installation
       Allow non-administrators to install drivers for these device setup classes: Enabled
       Allow Users to install device drivers for these classes:
       {4D36E979-E325-11CE-BFC1-08002BE10318}

    User Configuration
    Policies
      Administrative Templates
       Control Panel/Printers
        Point and Print Restrictions:Enabled
        Users can only point and print to these servers: Disabled
        Enter fully qualified server names separated by semicolons
        Users can only point and print to machines in their forest Enabled

        Security Prompts:
        When installing drivers for a new connection: Do not show warning or elevation prompt
    When updating drivers for an existing connection: Do not show warning or elevation prompt

    Thanks

    MCP | MCTS - Exchange 2007, Configuring | Member of TechNet Wiki Community Council | French Moderator on TechNet Wiki (Translation Widget)

    Saturday, August 31, 2013 2:07 AM
    |
    |
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    The option “Security Prompts” exist under the version of window server 2008, However, you can still configure the item“Point and Print Restrictions” as above.

    For more detailed information about configure Point and Print Restrictions, the article maybe helpful for you:

    Description of the Point and Print Restrictions policy setting in Windows Server 2003 and Windows XP:

    http://support.microsoft.com/kb/319939/en-us

    I hope this helps.

    Monday, September 02, 2013 9:20 AM
    |
    |
    Moderator

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello,

    please see "Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options\Devices: Prevent users from installing printer drivers "

    GPO questions are better asked in http://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserverGP&sort=lastpostdesc&brandIgnore=true&page=1

    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

    Friday, August 30, 2013 6:50 AM
    |
    |
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    Below are sample GPO settings for all kind of printer installations just for your reference:

     

    Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options\Devices: Prevent users from installing printer drivers - Disabled

    Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options\User Account Control: Detect application installations and prompt for elevation - Disabled

    Computer Configuration\Policies\Administrative Templates\System\Driver Installation\Allow non-administrators to install drivers for these device setup classes - Enabled

    For more detailed information, please refer to this forum:

    http://social.technet.microsoft.com/Forums/windowsserver/en-US/67e34b3c-8e53-4a38-9e99-92c3dd53e38a/configure-gpo-to-allow-user-install-printer-driver-without-administrative-right

    i hope this helps.

    Friday, August 30, 2013 1:53 PM
    |
    |
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Mr. Weber,

    I tried disable and enable Devices: Prevent users from installing printer drivers  still doesn't work.

    Regard.

    Friday, August 30, 2013 10:21 PM
    |
    |
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Anna,

    I windows server 2003 gpo I can't find

    Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options\User Account Control: Detect application installations and prompt for elevation - Disabled

    Computer Configuration\Policies\Administrative Templates\System\Driver Installation\Allow non-administrators to install drivers for these device setup classes - Enabled

    Regard.

    Friday, August 30, 2013 10:23 PM
    |
    |
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi, please see that post.

    Meinolf was in the right path, but you miss some settings

    Like Sergey's told;

    Computer Configuration
    Policies
    Windows Settings
      Security Settings
       Devices: Prevent users from installing printer drivers: Disabled
    Administrative Templates
      Printers
       Point and Print Restrictions: Enabled
       Users can only point and print to these servers: Disabled
       Users can only point and print to machines in their forest Enabled

       Security Prompts:
       When installing drivers for a new connection: Do not show warning or elevation prompt
       When updating drivers for an existing connection: Do not show warning or elevation prompt

       System/Driver Installation
       Allow non-administrators to install drivers for these device setup classes: Enabled
       Allow Users to install device drivers for these classes:
       {4D36E979-E325-11CE-BFC1-08002BE10318}

    User Configuration
    Policies
      Administrative Templates
       Control Panel/Printers
        Point and Print Restrictions:Enabled
        Users can only point and print to these servers: Disabled
        Enter fully qualified server names separated by semicolons
        Users can only point and print to machines in their forest Enabled

        Security Prompts:
        When installing drivers for a new connection: Do not show warning or elevation prompt
    When updating drivers for an existing connection: Do not show warning or elevation prompt

    Thanks

    MCP | MCTS - Exchange 2007, Configuring | Member of TechNet Wiki Community Council | French Moderator on TechNet Wiki (Translation Widget)

    Saturday, August 31, 2013 2:07 AM
    |
    |
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Yagmoth, <p>There's no <b><big>

    <p>Computer Configuration\Administrative Templates\Printers\Point and Print Restrictions: <p>Computer Configuration\Administrative Templates\Printers\Users can only point and print to these servers

    <p>Computer Configuration\Administrative Templates\Printers\Users can only point and print to machines in their forest

    <p>System/Driver Installation

    <p>Allow non-administrators to install drivers for these device setup classes: Enabled Allow Users to install device drivers for these classes: {4D36E979-E325-11CE-BFC1-08002BE10318}</b></big></p>

    <p>User <b><big>Configuration\Administrative Templates\Control Panel/Printers\Users can only point and print to these servers User Configuration\Administrative Templates\Control Panel/Printers\Users can only point and print to machines in their forest </b></big>

    <p>These are the only policies that I found in windows server 2003:

    <p><b><big>Computer Configuration\Policies\Windows Settings\Security Settings Devices: Prevent users from installing printer drivers: Disabled</b></big>

    <p><b><big> User Configuration\Administrative Templates\Control Panel/Printers\Point and Print Restrictions:Enabled </b></big></p>

    <p>I don't know where to find these policies:

    <p>Security Prompts:

    <p><b><big> When installing drivers for a new connection: Do not show warning or elevation prompt<p> When updating drivers for an existing connection: Do not show warning or elevation prompt
    </b></big>

    Sunday, September 01, 2013 5:16 PM
    |
    |
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    The option “Security Prompts” exist under the version of window server 2008, However, you can still configure the item“Point and Print Restrictions” as above.

    For more detailed information about configure Point and Print Restrictions, the article maybe helpful for you:

    Description of the Point and Print Restrictions policy setting in Windows Server 2003 and Windows XP:

    http://support.microsoft.com/kb/319939/en-us

    I hope this helps.

    Monday, September 02, 2013 9:20 AM
    |
    |
    Moderator