usage of built-in group Print Operators

Discussion in 'Active Directory' started by palomino, Feb 16, 2009.

  1. palomino

    palomino Guest

    I want allow my helpdesk people to use the printer management Interface on a
    Win2008 member server.
    But when they add a new printer the message "Network printer Installation
    Wizard can not be launched. Access is denied."

    How do I create a special Printer Admin Group?
     
    palomino, Feb 16, 2009
    #1
    1. Advertisements

  2. palomino

    Marcin Guest

    You don't have to - simply make sure that they are members of Print
    Operators local group on the server...

    hth
    Marcin
     
    Marcin, Feb 16, 2009
    #2
    1. Advertisements

  3. palomino

    palomino Guest

    palomino, Feb 16, 2009
    #3
  4. palomino

    Marcin Guest

    Sounds to me like the UAC mechanism is getting in the way. You might want to
    try adding the printer from the elevated Command Prompt using the
    printui.dll...

    hth
    Marcin
     
    Marcin, Feb 16, 2009
    #4
  5. Hello palomino,

    UAC will prevent all administrative groups to work without using RUNAS. The
    only account that can work without that is the administrator. So you have
    2 options disable UAC or live with it.

    For UAC also check this GPO:
    Computer configuration, windows settings, security settings, local policies,
    security options, "User account control: Behavior of the elevation prompt
    for administrators in Admin Approval Mode", choose "Elevate without prompting".

    This will ofcourse lower the security immense.

    Best regards

    Meinolf Weber
     
    Meinolf Weber [MVP-DS], Feb 16, 2009
    #5
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.