Printer installation rights.....Please

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

Ok i'll try this again. Thank you to all that have tried to help on this
issue. I am trying to give a power user rights to install a printer connected
by a USB cable. I have put the user in the power user group, and I have set
the power user group to have the load/unload drivers privelege. When I log on
as the user and turn the printer on, I get the new hardware found and the
computer tries to install the printer, but I get a message saying that you
have to be an administrator to install new hardware. I will look, but just
for the sake of asking, is there a privelege to set for installing new
hardware that needs to be set as well? It boggles me to think that you can
not easily set up the power user group with rights to install a new printer
on a computer. I do not want to give the user full Admin rights but this is
what it seems like they have to have short of me flying down to install
whatever printer they use. Thanks for any further help. This is turning into
quite a learning experience.

Tony

 

[Juan]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

You may have to configure the Plug and Play services to run under the user
account in Start\Run\services.msc\Plug and Play, and go to Plug and Play
properties\Start Session\select this account and add the user and password
apply and restart the computer and logon with the user account to try and
install the printer. You may also have to apply the same configuration to
Universal Plug and Play Host service, and SSDP discovery service.. but I
would put them off for now and only configure them as last resort.



the previous may be all you need to do but just in case here are some other
ideas:

If the configuration on Plug and Play does not allow the user to install
printers go to Windows Explorer\Tools\Folder Options\View\uncheck 'Hide
system protected files (recommended)'. also select 'Show all hidden files
and folders' and also uncheck 'Use simple file sharing (recommended)



Then look for C:\WINDOWS\System32\Spool\Printers and right clic, select
Properties\Security and write down a note of the default permissions already
in use to re-extablish them after you do the next changes; next go to
Advanced Options\Permissions and remove the check mark in 'Inherit from the
main object those permission entries etc.. and add a check mark in 'Replace
permission entries on all secondary objects etc.. ' now add the
Administrators and user groups with the automatic default permission
settings and independently add the special user account and clic on 'Modify'
and check on Total Control\accept\exit\ and verify on the main Security
windows that the permissions are again the same as you had previously
written down except for the 'special' user account which should have
administrator level permissions. Apply, Accept and exit. Go back into
Tools\Folder Options and check back on Do not show all hidden files and
folders and on Simple file sharing and alo on Hide system protected files
(recommended) and restart the computer.



You may also have to apply the same permission settings in
C:\WINDOWS\Installer (also a hidden system folder) If the permission
modifications in the Printers folder does not give full printer installing
capabilities to the special user account. this is for installation of
software but it may be necessary to install printer drivers.



Apply each one of these configurations and restart the computer after each
and see if the user account can now install the printer.





---------------------------------------------
"Northstar Ambulance" <NorthstarAmbulance@discussions.microsoft.com>
escribió en el mensaje
news:AD359C80-F609-468E-8DB8-5E2154B8751F@microsoft.com...
> Ok i'll try this again. Thank you to all that have tried to help on this
> issue. I am trying to give a power user rights to install a printer
connected
> by a USB cable. I have put the user in the power user group, and I have
set
> the power user group to have the load/unload drivers privelege. When I log
on
> as the user and turn the printer on, I get the new hardware found and the
> computer tries to install the printer, but I get a message saying that you
> have to be an administrator to install new hardware. I will look, but just
> for the sake of asking, is there a privelege to set for installing new
> hardware that needs to be set as well? It boggles me to think that you can
> not easily set up the power user group with rights to install a new
printer
> on a computer. I do not want to give the user full Admin rights but this
is
> what it seems like they have to have short of me flying down to install
> whatever printer they use. Thanks for any further help. This is turning
into
> quite a learning experience.
>
> Tony

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

Thanks,
I will give it a shot.

Tony

"Juan" wrote:

> You may have to configure the Plug and Play services to run under the user
> account in Start\Run\services.msc\Plug and Play, and go to Plug and Play
> properties\Start Session\select this account and add the user and password
> apply and restart the computer and logon with the user account to try and
> install the printer. You may also have to apply the same configuration to
> Universal Plug and Play Host service, and SSDP discovery service.. but I
> would put them off for now and only configure them as last resort.
>
>
>
> the previous may be all you need to do but just in case here are some other
> ideas:
>
> If the configuration on Plug and Play does not allow the user to install
> printers go to Windows Explorer\Tools\Folder Options\View\uncheck 'Hide
> system protected files (recommended)'. also select 'Show all hidden files
> and folders' and also uncheck 'Use simple file sharing (recommended)
>
>
>
> Then look for C:\WINDOWS\System32\Spool\Printers and right clic, select
> Properties\Security and write down a note of the default permissions already
> in use to re-extablish them after you do the next changes; next go to
> Advanced Options\Permissions and remove the check mark in 'Inherit from the
> main object those permission entries etc.. and add a check mark in 'Replace
> permission entries on all secondary objects etc.. ' now add the
> Administrators and user groups with the automatic default permission
> settings and independently add the special user account and clic on 'Modify'
> and check on Total Control\accept\exit\ and verify on the main Security
> windows that the permissions are again the same as you had previously
> written down except for the 'special' user account which should have
> administrator level permissions. Apply, Accept and exit. Go back into
> Tools\Folder Options and check back on Do not show all hidden files and
> folders and on Simple file sharing and alo on Hide system protected files
> (recommended) and restart the computer.
>
>
>
> You may also have to apply the same permission settings in
> C:\WINDOWS\Installer (also a hidden system folder) If the permission
> modifications in the Printers folder does not give full printer installing
> capabilities to the special user account. this is for installation of
> software but it may be necessary to install printer drivers.
>
>
>
> Apply each one of these configurations and restart the computer after each
> and see if the user account can now install the printer.
>
>
>
>
>
> ---------------------------------------------
> "Northstar Ambulance" <NorthstarAmbulance@discussions.microsoft.com>
> escribió en el mensaje
> news:AD359C80-F609-468E-8DB8-5E2154B8751F@microsoft.com...
> > Ok i'll try this again. Thank you to all that have tried to help on this
> > issue. I am trying to give a power user rights to install a printer
> connected
> > by a USB cable. I have put the user in the power user group, and I have
> set
> > the power user group to have the load/unload drivers privelege. When I log
> on
> > as the user and turn the printer on, I get the new hardware found and the
> > computer tries to install the printer, but I get a message saying that you
> > have to be an administrator to install new hardware. I will look, but just
> > for the sake of asking, is there a privelege to set for installing new
> > hardware that needs to be set as well? It boggles me to think that you can
> > not easily set up the power user group with rights to install a new
> printer
> > on a computer. I do not want to give the user full Admin rights but this
> is
> > what it seems like they have to have short of me flying down to install
> > whatever printer they use. Thanks for any further help. This is turning
> into
> > quite a learning experience.
> >
> > Tony
>
>
>