[Samba] adding printers from netlogon script

[Ryan Novosielski]

My users are merely guests, so I know it is not necessary to have them as
local Power Users. I have the policy file set to allow point-and-print
additions I suppose. The way I add printers is from VBScript, but this
idea looks more elegant (if it will work for me).

---- _  _ _  _ ___  _  _  _
|Y#| |  | |\/| |  \ |\ |  |  | Ryan Novosielski - Jr. UNIX Systems Admin
|$&| |__| |  | |__/ | \| _|  | novosirj at umdnj.edu - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630

On Tue, 13 Jan 2004, Andrew Gaffney wrote:

> John H Terpstra wrote:
> > On Tue, 13 Jan 2004, Andrew Gaffney wrote:
> >
> >
> >>John H Terpstra wrote:
> >>
> >>>On Tue, 13 Jan 2004, Andrew Gaffney wrote:
> >>>
> >>>
> >>>
> >>>>John H Terpstra wrote:
> >>>>
> >>>>
> >>>>>On Tue, 13 Jan 2004, Andrew Gaffney wrote:
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>>Kurt Pfeifle wrote:
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>>>[Samba] adding printers from netlogon script
> >>>>>>>>Andrew Gaffney agaffney at technaut.darktalker.net
> >>>>>>>>Tue Dec 9 20:10:07 GMT 2003
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>While this doesn't relate specifically to Samba, I need to do this in
> >>>>>>>>a netlogon .bat file in a Samba domain. In my network, I have a
> >>>>>>>>printer hooked to a JetDirect so that it is a TCP/IP printer. Is there
> >>>>>>>>a way I can automatically have this printer mapped/added when the user
> >>>>>>>>is logged on?
> >>>>>>>>
> >>>>>>>
> >>>>>>>Test this command from a "DOS box":
> >>>>>>>
> >>>>>>> rundll32 printui.dll,PrintUIEntry /in /n
> >>>>>>>\\printerserver\printersharename
> >>>>>>>
> >>>>>>>If it works, it can go into the logon script. (Of course "printersharename"
> >>>>>>>needs to exist on "printerserver" and must have printer driver deposited on
> >>>>>>>the server's [print$]-share for "point'n'print" download...). And:
> >>>>>>>
> >>>>>>> rundll32 printui.dll,PrintUIEntriy /?
> >>>>>>>
> >>>>>>>will show up a full "man page" (hehe...)
> >>>>>>>
> >>>>>>>See also
> >>>>>>>
> >>>>>>> http://de.samba.org/samba/docs/man/printing.html#id2931140
> >>>>>>
> >>>>>>I used the above and some other references and pieced togethere a few commands to auto-map
> >>>>>>network printers at logon:
> >>>>>>
> >>>>>>REM rundll32 printui.dll,PrintUIEntry /ia /m "Ricoh Aficio 200/250 PCL" /h "Intel" /v
> >>>>>>"Windows 2000" /f %windir%\inf\ntprint.inf
> >>>>>>rundll32 printui.dll,PrintUIEntry /if /b "Hallway Printer" /f %windir%\inf\ntprint.inf /r
> >>>>>>"\\skyline\jetdirect" /m "Ricoh Aficio 200/250 PCL"
> >>>>>>
> >>>>>>These work just fine...as long as the user is an administrator. If the user logging on is
> >>>>>>a regular user, which most are, it give me "Access denied" when trying to map the printer,
> >>>>>>on the same computer. These commands are being run from the netlogon.bat script that runs
> >>>>>>at logon. Am I missing something?
> >>>>>
> >>>>>
> >>>>>Indeed you are. Windows NT/200x/XP requires you to explicitly give the
> >>>>>user the rights to make changes. If I am not mistaken, you can get around
> >>>>>this by adding the Domain Users group to the Local Power Users group on
> >>>>>each workstation.
> >>>>
> >>>>What rights does a normal user have by default? Can they map a network drive?
> >>>
> >>>
> >>>Default rights do not permit the user to change any system settings, not
> >>>even the time.
> >>>
> >>>Once logged in an authenticated network user can map a drive if he/she has
> >>>access to the target resouce. Since printers require installation of
> >>>driver files, this is not permitted by default user settings.
> >>
> >>Is there no way to add printers from a netlogon script without the user being a Power User
> >>or higher?
> >
> >
> > That question is best answered by Microsoft. Have you checked the
> > Microsoft Knowledge Base?
> >
> > My interpretation of your question is, "Is there no way to give users a
> > privilege they do not have without giving them the privilege they need?"
> >
> > Logically, my answer is - No. No way. But my logic is flawed, so do not
> > take my answer as gospel.
>
> I hadn't even thought about consulting the MS KB, even though this problem isn't
> technically Samba related and is definately MS related and involves using their tools ;)
>
> --
> Andrew Gaffney
> System Administrator
> Skyline Aeronautics, LLC.
> 776 North Bell Avenue
> Chesterfield, MO 63005
> 636-357-1548
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>