Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. Windows 7 does not allow domain user to add a local printer

Windows 7 does not allow domain user to add a local printer

View products that this article applies to.

Summary

By default, Windows 7 does not allow a domain user to add a local printer except under the following circumstances:

1. Install a printer is allowed if the driver is already in the driver store
2. Add a printer is allowed if the driver is already installed in the local spooler

↑ Back to the top

More Information

To revert back to Windows XP behavior, you can remove the INTERACTIVE security group from the print server security descriptor.

This can be automated via startup script by carrying out the following steps:

1. On a client machine, remove the INTERACTIVE group from the print server security descriptor
2. Export the registry key from this machine: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\ServerSecurityDescriptor
3. Create a Vbscript to import this registry key and restart the spooler service
4. Create a StartupScript GPO to run this Vbscript when the client computer restarts


↑ Back to the top

Keywords: kb

↑ Back to the top

Article Info
Article ID : 2530459
Revision : 1
Created on : 1/7/2017
Published on : 3/29/2011
Exists online : False
Views : 285