Point & Print & Permissions

[Axel Thimm]

On Thu, Feb 08, 2001 at 02:37:10PM +0100, Jean Francois Micouleau wrote:
> On Thu, 8 Feb 2001, Axel Thimm wrote:

> > > With "point & print" printer connections are installed per user, so you
> > > need not do anything as "Administrator" (and it won't help).
> > > Just login as the user who wants to use the printer, and install the
> > > printer.
> > Doesn't this only work for users in the "Power Users" group? Our local NT
> > admins wouldn't like to grant too much rights to unexperienced Windows
> > users.
> 
> The problem with point&print is that users can only read the 
> %SystemRoot%\system32\spool\drivers directory.
> 
> Only Administrators and powers users can coy drivers to the local
> workstations.
> 
> So for point&print to work for users, you have 2 choice: 
> either you log once as an administrator on the workstation and connected
> to all printer to download the drivers to the workstation,
> or you change the security permissions on the ...spool\drivers directory
> and grant the change and write rights to the users group.

I'd prefer the first solution, which means less changes to the local NT client
installation. So I'd setup the [print$] share to be public, so that
workstations administrators may connect to that share.

But what about the printer shares themselves, which I do not want to be
public? A printer driver installation usually ends with printing a test page,
and I do not want to allow a guest print connection. So wouldn't the driver
installation utlimatively have to fail?
-- 
Axel.Thimm at physik.fu-berlin.de