×
INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Contact US

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

access for non-administrator accounts

access for non-administrator accounts

access for non-administrator accounts

(OP)
We are having issues with one of our foreign office in regards to user access. We are running Windows XP Pro SP2 (in some cases, SP3) on our computers and we have an admin account setup for things like installing local printers and changing IPs to static.

Now we've had issues with users using thing to their advantage and installing unapproved software and we want to stop this.

The question I pose is, Does anyone know of a way to grant access to Add Printer and Network Properties on a local account thats not an administrator?

If this question should be anked in a different forum, please let me know. I'm new to the whole forum thing.

Thanks

RE: access for non-administrator accounts

I believe there is a GPO to allow non admins to add printers, not sure about the network connections though . . .


Adrian Paris

Paris Engineering Ltd

http://www.ForumKB.com
Google search of just tech forums & articles
(very useful, honest!)
 

RE: access for non-administrator accounts

Yes there is a GPO (or local security policy) setting under "computer management\windows settings\security settings\local policies\security options". However I have found this doesnt do what you might think.

What will stop a normal user from adding a printer is the installation of the drivers, I think it is because they do not have modify rights to the %systemroot%\system32 directory. The GPO will not change the ntfs permissions on the folder, so an admin would have to put that there.

What I normally do is install the drivers for all the network printers, or in your case a local printer, on a fresh computer, then image it. When I roll out a computer from the office, the user has the ability to add a printer as needed without admin rights because the driver has already been installed on the PC.


For network connections, you will have to look to GPO as well. Under "User Configuration\Administrative Templates\Network\Network Connections" you will find many different options to choose from. Make sure you pay attention to the terminology for each policy as some people get the "enabled, disabled" setting confused and end up doing the complete opposite of what they need.

After you make your changes, computer configuration changes require a reboot, and user configuration requires a logoff/logon or sometimes just a "gpupdate" command to update the policies

Hope this helps

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members! Already a Member? Login

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close