Windows 7 does not allow domain user to add a local printer

Article translations Article translations
Close Close
Article ID: 2530459 - View products that this article applies to.
Expand all | Collapse all

SUMMARY

By default, Windows 7 does not allow a domain user to add a local printer except under the following circumstances:

1. Install a printer is allowed if the driver is already in the driver store
2. Add a printer is allowed if the driver is already installed in the local spooler

MORE INFORMATION

To revert back to Windows XP behavior, you can remove the INTERACTIVE security group from the print server security descriptor.

This can be automated via startup script by carrying out the following steps:

1. On a client machine, remove the INTERACTIVE group from the print server security descriptor
2. Export the registry key from this machine: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\ServerSecurityDescriptor
3. Create a Vbscript to import this registry key and restart the spooler service
4. Create a StartupScript GPO to run this Vbscript when the client computer restarts


Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use for other considerations.

Properties

Article ID: 2530459 - Last Review: March 29, 2011 - Revision: 1.0
APPLIES TO
  • Windows 7 Enterprise
  • Windows 7 Professional
  • Windows 7 Ultimate
Keywords: 
KB2530459

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com