Announcement

Collapse
No announcement yet.

Prohibit a user from changing the default printer

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Prohibit a user from changing the default printer

    Hi Guys,

    i tried to find that setting on GPEDIT.MSC and could not,
    anyone can help?
    I have an RDP user account, that a few people using.
    I want to prevent them from changing the default printer.

    Thanks,
    Retaliator
    Thanks & Regards

    Retaliator

    MCSA/MCSE/CCNA
    Computer Science Graduate

  • #2
    Re: Prohibit a user from changing the default printer

    Hey, dude.
    Let me see if I get this straight: you have several users sing the same credentials (username&password) to connect through RDP to a server? And one connects, it changes the default printer on the server, so the already logged in users see his printer as default?
    If so, this is the ordinary behavior of Terminal Services. While you are using the same username, there's no solution for that. I have this problem on two Citrix servers, and all the answers we got from Microsoft were : "This is by design. Use different usernames."
    Anyway, is this your set-up?

    Sorin Solomon


    In order to succeed, your desire for success should be greater than your fear of failure.
    -

    Comment


    • #3
      Re: Prohibit a user from changing the default printer

      How can i lock them from changing the default printer at all?
      Thanks & Regards

      Retaliator

      MCSA/MCSE/CCNA
      Computer Science Graduate

      Comment


      • #4
        Re: Prohibit a user from changing the default printer

        What you can try is to change the permissions on the folowing registrykey:
        HKEY_USERS\S-1-...SID...\Software\Microsoft\Windows NT\CurrentVersion\Windows

        Change the permissions on that key for that User to readonly.

        - First you have to determine the SID of that user
        - Then use a 'computer Startupscript'
        OR, a 'computer GPO' (computer Configuration/Windows Settings/Security Settings/Registry --> HKEY_Users), to change the permissions.

        \Rems

        This posting is provided "AS IS" with no warranties, and confers no rights.

        __________________

        ** Remember to give credit where credit's due **
        and leave Reputation Points for meaningful posts

        Comment


        • #5
          Re: Prohibit a user from changing the default printer

          Thanks,

          Is not there a GPO setting, even LOCAL policy to remove access to printers or maybe control panel at all ?
          if i use GPEDIT.MSC on that specific server and remove access to control panel, who will be affected?

          Retaliator
          Thanks & Regards

          Retaliator

          MCSA/MCSE/CCNA
          Computer Science Graduate

          Comment


          • #6
            Re: Prohibit a user from changing the default printer

            Is not there a GPO setting
            You have to Look at the AD GroupPolicyObjects:
            Computer Configuration/Windows Settings/Security Settings/Registry
            -> right click, add a Key

            Otherwise, on the server it self you can directly edit the registry.


            Before you continue, Im not sure if this setting might effect other processes.
            Test it on a test account.

            First determine the SID of the useraccount
            http://www.petri.com/view_additional...on_in_aduc.htm

            Then goto
            HKEY_USERS\S-1-...SID...\Software\Microsoft\Windows NT\CurrentVersion\Windows

            rightclick on the key and choose "permissions"
            - then click on the Advanced button
            - disable inheritence <= Copy current security
            - [OK]
            - Edit the 'user' => uncheck 'Fullcontrol'
            (If the SID doesnot exists in the registry before the users logged on, then the user's profile was not cached
            you then have to use a runas script http://support.microsoft.com/kb/245031 )


            if i use GPEDIT.MSC on that specific server and remove access to control panel, who will be affected?
            No, users are to smart sometimes.


            \Rems
            Last edited by Rems; 21st May 2007, 13:01.

            This posting is provided "AS IS" with no warranties, and confers no rights.

            __________________

            ** Remember to give credit where credit's due **
            and leave Reputation Points for meaningful posts

            Comment

            Working...
            X