[Samba] allowing users to install printers

[Ian]

>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Tomasz Chmielewski wrote:
>>
>>>> You have to write your own adm file.  You can set any registry
>>>> setting via an NT4 policy file.
>>>
>>> The problem is, I don't really know which registry setting
>>> I have to set to allow users to set up printers.
>>
>> Hence my original suggestion about tweaking it using
>> gpedit.msc.  Watch what happens (with regmon.exe) when you
>> change the setting.
>>
>>
>>
>>
>>
>> cheers, jerry
>>
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG v1.4.2 (MingW32)
>> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>>
>> iD8DBQFDxtd4IR7qMdg1EfYRAgonAJ95ci9iKESyBw/3S42Mf1rjnhhLsACeJ4lV
>> KTQXixF3JJ+6qe9/OHIhhAg=
>> =a4Ki
>> -----END PGP SIGNATURE-----
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/listinfo/samba
>>
> Jerry,
>
>   Are you talking about the:
> "Computer Configuration\Windows Settings\Security Settings\Local
> Policies\Security Options\Devices: Prevent users from installing printer
> drivers" option?
>
> According to this, it's disabled by default for workstations, which means
> that users should already be able to install drivers:
> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/fedd859e-f512-45ee-8667-421e0669839a.mspx
>
> I think that security option should read: "Prevent power users" from
> installing printer drivers... Restricted users still cannot install stuff.
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>

Hmm.. looks like I'm wrong about renaming it to "prevent power users":

"If this setting is enabled, only Administrators and Power Users can
install a printer driver as part of adding a network printer. If this
setting is disabled, any user can install a printer driver as part of
adding a network printer."

and

"Notes:

This setting does not affect the ability to add a local printer.

This setting does not affect Power Users or Administrators.
"