You are currently offline, waiting for your internet to reconnect

Windows 7 does not allow domain user to add a local printer

SUMMARY
By default, Windows 7 does not allow a domain user to add a local printer except under the following circumstances:

1. Install a printer is allowed if the driver is already in the driver store
2. Add a printer is allowed if the driver is already installed in the local spooler
MORE INFORMATION
To revert back to Windows XP behavior, you can remove the INTERACTIVE security group from the print server security descriptor.

This can be automated via startup script by carrying out the following steps:

1. On a client machine, remove the INTERACTIVE group from the print server security descriptor
2. Export the registry key from this machine: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\ServerSecurityDescriptor
3. Create a Vbscript to import this registry key and restart the spooler service
4. Create a StartupScript GPO to run this Vbscript when the client computer restarts


Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use for other considerations.
Properties

Article ID: 2530459 - Last Review: 03/29/2011 21:17:00 - Revision: 1.0

Windows 7 Enterprise, Windows 7 Professional, Windows 7 Ultimate

  • KB2530459
Feedback
>