Greetings, In our domain we have one print server which shares all networked printers that people can connect to. We want to disable the option for people to add a local printer because we have labs in which people are welcome to add a network printer, but there are no local printers to add, and people keep adding a local printer (which physically does not exist), sharing it, trying to print to it (and other people later on as well), then getting frustrated. We would really rather just prevent users from adding local printers as it is not necessary. We've poked around the group policies and the only one that comes close, but ultimately doesn't solve the real problem, is "Allow Print Spooler to accept client connections". Any ideas?Windows Systems Administrator, Computer Action Team

lucas.suggs wrote: > Greetings, > > In our domain we have one print server which shares all networked printers that > people can connect to. We want to disable the option for people to add a local > printer because we have labs in which people are welcome to add a network > printer, but there are no local printers to add, and people keep adding a local > printer (which physically does not exist), sharing it, trying to print to it > (and other people later on as well), then getting frustrated. We would really > rather just prevent users from adding local printers as it is not necessary. > > We've poked around the group policies and the only one that comes close, but > ultimately doesn't solve the real problem, is "Allow Print Spooler to accept > client connections". > > Any ideas? > > -------------------------------------------------------------------------------- > Windows Systems Administrator, Computer Action Team I'd suggest that you just make sure "the people" in those labs know what they're doing *before* granting them administrative privileges. Much simpler, that way. -- Bruce Chambers Help us help you: http://www.catb.org/~esr/faqs/smart-questions.html http://support.microsoft.com/default.aspx/kb/555375 They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. ~Benjamin Franklin Many people would rather die than think; in fact, most do. ~Bertrand Russell The philosopher has never killed any priests, whereas the priest has killed a great many philosophers. ~ Denis Diderot

I'd suggest that you just make sure "the people" in those labs know what they're doing *before* granting them administrative privileges. Much simpler, that way. I didn't state this, because I figured it would be obvious, but nobody except the administrators (myself and a couple other people) have administrator access on these computers. Yes, normal users can add a local printer. Why? I have no idea. I absolutely loved the behavior of XP in this respect because it completely grayed out the option for adding a local printer, whereas 7 allows people to do it. The only thing I can think of that might be allowing people to do this is because we allow normal users to be able to pull down the drivers for network printers to be installed on the local computer.Windows Systems Administrator, Computer Action Team

I still have not heard of or found a way to disable adding a local printer for a normal user in Windows 7 (who does not have administrator priveleges). Does anybody else have any clues or ideas?Windows Systems Administrator, Computer Action Team

Hi. There is a way to disable users the right to add a local printer. If you running Server 2008 for the domain, just go to the Group Policy Object Editor, or run "gpedit.msc" in the Start Menu search box. From there you can disable the options needed. But I'm not that familiar with Server. But on Windows 7, you can follow theses steps... Run the "mmc" command in the Start Menu search box. Select File, Add/Remove Snap-in... Select the Group Policy Object Editor, and hit add. You choose between the Local PC, or a connected domain. Once in this snap-in expand, User Configuration -> Administrative Templates -> Control Panel -> Printers. From here you have some options. Including, "Prevent Addition of Printers". Which is the same thing in XP where the options for adding Local Printers are grayed out. Read the description for this option though. It will disable the "Add Printer" button in Control Panel's, Devices and Printers. Pretty much everything except for the "Add Legacy Hardware" option in Device Manager. These setting are only for 7 Pro, or above. If your using Home Premium for your users, you must change these policies in the domain where server is running. Please post a reply with what your solutions are, if this issue is fixed!

I just tried this today and it won't even allow me to add a network printer if I enable that option (definitely what I *don't* want to have happen). I can't even navigate to the print server and right-click->Connect on the printer (tells me it's denied). I really wish that policy said "Prevent addition of local printers", and didn't deny network printers as well. Still no luck.Windows Systems Administrator, Computer Action Team