A normal domain user cannot remove a network printer in Windows 7
I never said anything about printer drivers. I'm talking about the actual network printer connection. If the user has rights to add a network printer they should be able to remove it as well. All my users are part of the Domain Users
group, that's it. They are not part of any local groups on the Windows 7 client computers. The more rights they have the more things get screwed up.
May 31st, 2012 9:45am
so how are the users getting the printer drivers then? If you are connecting to a network printer they have to get the drivers somehow...when we connect here if the printer hasn't been set up before it loads drivers, then we must enter our credentials....if
the user is just connecting to the printer they don't have to enter in any credentials if the driver is already loaded on their machine.
Free Windows Admin Tool Kit Click here and download it now
May 31st, 2012 12:42pm
If it's a printer make/model the user has never connected to before, Windows installs the drivers with no questions asked. This was accomplished by setting group policies so users are not asked for credentials when installing a network printer
or its drivers. Works great. The problem is normal users (non-local admins) cannot remove the printer if they no longer need it.
May 31st, 2012 1:46pm
http://social.technet.microsoft.com/Forums/en-AU/itprovistaprinting/thread/e907e7e0-99fd-4f35-bedb-c058558aab78
take a look here, seems to be kind of what you are experiencing...What exactly did you change in the GPO to allow for the printer to be installed?
Free Windows Admin Tool Kit Click here and download it now
June 1st, 2012 8:00am
First I ran into a problem where a normal user could not add a network printer in Windows 7 without entering elevated credentials. I resolved that with some group policy settings. Now that same user who had rights to add the printer can't delete
it, unless they are a local admin, which I don't want them to be. How do you resolve this?
June 1st, 2012 8:41am
I say its good policy to not let them delete a printer driver...or add one...We set up all printer drivers here for users because we want to make sure they are printing in desiginated areas. If you let users delete a printer driver I think you will
allow more headaches from accidental deletions.
with that being said...what account do you set users up as on the windows 7 machine? Power User?
Free Windows Admin Tool Kit Click here and download it now
June 1st, 2012 9:30am
I never said anything about printer drivers. I'm talking about the actual network printer connection. If the user has rights to add a network printer they should be able to remove it as well. All my users are part of the Domain Users
group, that's it. They are not part of any local groups on the Windows 7 client computers. The more rights they have the more things get screwed up.
June 1st, 2012 9:42am
I will browse through the thread you provided, thanks.
The GPO's I changed to allow normal users (Domain Users) to add a network printer without being prompted for credentials are:
Computer > Policies > Administrative Templates > Printers > Point and Print Restrictions. I Enabled this setting and fed it all my print servers using FQDN's. I also set to "Do not show warning or elevation prompt"
and "Show warning only".
User > Policies > Administrative Templates > Control Panel > Printers > Point and Print Restrictions. I Enabled this setting and fed it all my print servers using FQDN's. I also set to "Do not show warning or elevation
prompt" and "Show warning only".
Free Windows Admin Tool Kit Click here and download it now
June 1st, 2012 9:45am
sorry we got AD 2003 here I can't see the same settings you have
June 1st, 2012 10:49am
so how are the users getting the printer drivers then? If you are connecting to a network printer they have to get the drivers somehow...when we connect here if the printer hasn't been set up before it loads drivers, then we must enter our credentials....if
the user is just connecting to the printer they don't have to enter in any credentials if the driver is already loaded on their machine.
Free Windows Admin Tool Kit Click here and download it now
June 1st, 2012 12:39pm
If it's a printer make/model the user has never connected to before, Windows installs the drivers with no questions asked. This was accomplished by setting group policies so users are not asked for credentials when installing a network printer
or its drivers. Works great. The problem is normal users (non-local admins) cannot remove the printer if they no longer need it.
June 1st, 2012 1:44pm
http://social.technet.microsoft.com/Forums/en-AU/itprovistaprinting/thread/e907e7e0-99fd-4f35-bedb-c058558aab78
take a look here, seems to be kind of what you are experiencing...What exactly did you change in the GPO to allow for the printer to be installed?
Free Windows Admin Tool Kit Click here and download it now
June 2nd, 2012 7:52am
I will browse through the thread you provided, thanks.
The GPO's I changed to allow normal users (Domain Users) to add a network printer without being prompted for credentials are:
Computer > Policies > Administrative Templates > Printers > Point and Print Restrictions. I Enabled this setting and fed it all my print servers using FQDN's. I also set to "Do not show warning or elevation prompt"
and "Show warning only".
User > Policies > Administrative Templates > Control Panel > Printers > Point and Print Restrictions. I Enabled this setting and fed it all my print servers using FQDN's. I also set to "Do not show warning or elevation
prompt" and "Show warning only".
June 2nd, 2012 9:37am
sorry we got AD 2003 here I can't see the same settings you have
Free Windows Admin Tool Kit Click here and download it now
June 2nd, 2012 10:41am
Hi,
You may have a try to delete the network printers via registry. I think it relates to the permission of your domain user.
Windows XP Remove Any Network Printer via Registry Editor
http://www.tech-recipes.com/rx/2855/windows_xp_remove_any_network_printer_via_registry_editor/
Hope that helps.Ivan-Liu
TechNet Community Support
June 4th, 2012 5:18am
This is only an issue for Windows 7 users. Windows XP users are able to delete network printers with no errors.
Free Windows Admin Tool Kit Click here and download it now
June 4th, 2012 4:10pm
Try using this policy "Point and Print Restrictions"
http://blogs.msdn.com/b/7/archive/2011/07/11/allowing-standard-users-to-install-network-printers-on-windows-7-without-prompting-for-administrative-credentials.aspx
June 4th, 2012 5:09pm
Hi,
You may have a try to delete the network printers via registry. I think it relates to the permission of your domain user.
Windows XP Remove Any Network Printer via Registry Editor
http://www.tech-recipes.com/rx/2855/windows_xp_remove_any_network_printer_via_registry_editor/
Hope that helps.Ivan-Liu
TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
June 5th, 2012 5:18am
Uhhh Brano, had you read the problem, it is not with adding printers, it is with deleting printers.
June 6th, 2012 8:20am
This is only an issue for Windows 7 users. Windows XP users are able to delete network printers with no errors.
Free Windows Admin Tool Kit Click here and download it now
June 6th, 2012 4:06pm
Try using this policy "Point and Print Restrictions"
http://blogs.msdn.com/b/7/archive/2011/07/11/allowing-standard-users-to-install-network-printers-on-windows-7-without-prompting-for-administrative-credentials.aspx
June 6th, 2012 5:04pm
Uhhh Brano, had you read the problem, it is not with adding printers, it is with deleting printers.
Free Windows Admin Tool Kit Click here and download it now
June 7th, 2012 8:18am