Giving users access to install printers

Home Forums Microsoft Networking and Management Services Active Directory Giving users access to install printers

This topic contains 5 replies, has 6 voices, and was last updated by Avatar jordius 8 years, 5 months ago.

Viewing 6 posts - 1 through 6 (of 6 total)
  • Author
    Posts
  • Avatar
    ronaldo7
    Member
    #155057

    Hi,

    Currently running AD on windows 2008 r2. We have users that have laptops setup as restricted laptops, meaning they are unable to run any .exe files on the laptops.

    The problem is alot of these people work from home and need to be able to install there personal printers on the restricted pc’s. Most of the installation files for the printers run as .exe formats.

    Does anyone know if there is a policy that allows users to install printers on restricted machines ?

    Any help much appricated.

    tehcamel
    tehcamel
    Moderator
    #357621

    Re: Giving users access to install printers

    Uhm.. they want to install their personal home printers, on their work computers.

    You’re running the sort of environment where it’s neccessary to restrict executable applications.. it makes me wonder why you’d want to allow them to install their own printers, which you’d then need to support..

    Avatar
    jordius
    Member
    #382183

    Re: Giving users access to install printers

    you may want to consider either unrestricting the machines or purchasing the HP Deskjet 470 portable printer for the users. The printer purchase price in teh long run is easier to quantify if you want to avoid issues later down the road with the users laptops.

    Avatar
    L4ndy
    Member
    #277034

    Re: Giving users access to install printers

    ronaldo7;240283 wrote:
    Hi,

    Currently running AD on windows 2008 r2. We have users that have laptops setup as restricted laptops, meaning they are unable to run any .exe files on the laptops.

    The problem is alot of these people work from home and need to be able to install there personal printers on the restricted pc’s. Most of the installation files for the printers run as .exe formats.

    Does anyone know if there is a policy that allows users to install printers on restricted machines ?

    Any help much appricated.

    Actually not many printer drivers come packaged as exe. with the exception of exe wrappers some manufacturers decide to ship their drivers and associated print programs, but even then if you browse media you should get to the right driver files.
    How are the laptops being restricted?

    Avatar
    tomana
    Member
    #381191

    Re: Giving users access to install printers

    This can be closed off.

    The solution I use is that I get the users to log onto the companys vpn when at home and then I move there pc’s in the admin group.

    I run a gpupdate /force /boot when they are on the vpn. After the reboot they have admin rights to install the printer. Once the printer is install I move the pc back into the restricted group and run another gpupdate /force /boot and when they log back into the pc after the reboot the admin permissions have been revoked.

    Its not a perfect solution but it does the job :-?

    If anyone knows another way please pm me.

    Avatar
    stamandster
    Member
    #280369

    Re: Giving users access to install printers

    How about using a WMI filter for a “printer add policy” which get’s applied only when connecting with a different subnet or some other variable?

    It’s kind of a trade off in security. I mean first you’re not letting them run a possibly harmless executables but you’re allowing them to print from/to anywhere, which could be just as insecure.

    Or why not get them to tell you what printers they have at home and pre-install the drivers for them before they leave. I mean they can’t be changing printers THAT much, right?

Viewing 6 posts - 1 through 6 (of 6 total)

You must be logged in to reply to this topic.