Member of Printer Operators Group Cannot Add Printer

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Why can't a member of the Printer Operators group add a printer with a
third-party driver? Additionally, delegation of control has been run to
allow the printer operators group full control to printers. If you define
the policy to load/unload devices for these users only, and it's done at the
domain level (because the stations we need to add the printers to are various
domain controllers and servers), others lose the ability to add devices on
their workstations even if they're administrators.
 
Do they also need to be a member of the Power Users group (I have read this?
I prefer not to do that if possible. The group already has that privilege
through the Domain Controllers policy, although it shows as a SID for some
reason rather than the group name.

Alan Morris(MSFT) said:
You would need to give the group the Load and Unload driver Privilege

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

LoriP said:
Why can't a member of the Printer Operators group add a printer with a
third-party driver? Additionally, delegation of control has been run to
allow the printer operators group full control to printers. If you define
the policy to load/unload devices for these users only, and it's done at the
domain level (because the stations we need to add the printers to are various
domain controllers and servers), others lose the ability to add devices on
their workstations even if they're administrators.
Click to expand...
Click to expand...
 
Unknown, I do not have domain controllers, just single role print servers.
I use Power Users on my servers for remote administration.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

LoriP said:
Do they also need to be a member of the Power Users group (I have read this?
I prefer not to do that if possible. The group already has that privilege
through the Domain Controllers policy, although it shows as a SID for some
reason rather than the group name.

Alan Morris(MSFT) said:
You would need to give the group the Load and Unload driver Privilege

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

LoriP said:
Why can't a member of the Printer Operators group add a printer with a
third-party driver? Additionally, delegation of control has been run to
allow the printer operators group full control to printers. If you define
the policy to load/unload devices for these users only, and it's done
Click to expand...
at
the
domain level (because the stations we need to add the printers to are various
domain controllers and servers), others lose the ability to add devices on
their workstations even if they're administrators.
Click to expand...
Click to expand...
Click to expand...
 
The spooler grants administrative permission to "Print Operators" on DCs and
to "Power Users" on servers which are not DCs.

So they answer is yes, you need to use the "power users".
--
Felix Maxa
Windows Printing Team

This posting is provided "AS IS" with no warranties, and confers no rights.


Alan Morris(MSFT) said:
Unknown, I do not have domain controllers, just single role print servers.
I use Power Users on my servers for remote administration.

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no
rights.

LoriP said:
Do they also need to be a member of the Power Users group (I have read this?
I prefer not to do that if possible. The group already has that
privilege
through the Domain Controllers policy, although it shows as a SID for
some
reason rather than the group name.

Alan Morris(MSFT) said:
You would need to give the group the Load and Unload driver Privilege

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.

Why can't a member of the Printer Operators group add a printer with
a
third-party driver? Additionally, delegation of control has been run to
allow the printer operators group full control to printers. If you define
the policy to load/unload devices for these users only, and it's done at
the
domain level (because the stations we need to add the printers to are
various
domain controllers and servers), others lose the ability to add devices on
their workstations even if they're administrators.
Click to expand...
Click to expand...
Click to expand...
 
Back
Top