[Samba] SOLVED -- Re: Domain user printing

[Robert Moskowitz]

Thanks to the help here and hints over on the SME forum, I got printing 
working.

Basically you have to be logged in on the domain with an admin user and 
THEN install the printer drivers.

So first I had to unistall the drivers, using a local admin user account.

Then I had to log in to the domain with an admin user.  For this I 
needed the line:

     admin users = user1

And I had to spell that right (I had 'admin user' and I did not note any 
error in starting smb services).

Then I installed the driver from this user and it could print.  I could 
then log in with a non-admin user and they could also print.

So anyone that has some control over wiki content for Samba might want 
to put this in for local printer installs:

At least if your printer is a network attached printer and you are 
printing directly to it, you install the printer drivers while logged in 
as a domain admin user.

On 10/26/2010 01:51 PM, Dale Schroeder wrote:
> On 10/26/2010 11:15 AM, Robert Moskowitz wrote:
>> On 10/26/2010 06:39 AM, Lukasz Zalewski wrote:
>>> On 25/10/2010 19:52, Robert Moskowitz wrote:
>>>> It looks like a domain user has NO printing permission.
>>>>
>>>> Do I need Policy Editor for this? Where do I get it to run on an XP 
>>>> Pro
>>>> system?
>>>>
>>>> I have seen various notes about this, but I can't make head or 
>>>> tails of
>>>> them.
>>>>
>>>>
>>>
>>> Robert,
>>> Have a look at 
>>> http://wiki.samba.org/index.php/Implementing_System_Policies_with_Samba
>>> This explains deployment of system policy through samba 3.X. It also 
>>> outlines the difference between system policy and group policy
>>> You can still use Local Group Policy (through gpedit.msc), but as 
>>> the name suggests its local to every machine, and not deployable 
>>> from the Domain Controller.
>>
>> What good is it to know how to implement a policy for all computers 
>> on the domain if you don't know what policy is giving you the problem?
>>
>> How do I troubleshoot this blockage.   All I get is the print failure 
>> when using a domain user.
>
> Robert,
>
> Are any of the group policies in the following section set?  A 
> previous email stated you were looking at templates under "Computer 
> Configuration", so check under
>
> *User Configuration*\Administrative Templates\Control Panel\Printers
>
> Details here:
> http://support.microsoft.com/kb/319939
>
> Dale
>
>>
>>
>>> If you using samba4 have a look at 
>>> http://wiki.samba.org/index.php/Samba4/HOWTO#Step_1:_Installing_Windows_Remote_Administration_Tools_onto_Windows 
>>>
>>> These tools include Group Policy Management console that works very 
>>> well with samba4
>>>
>>> HTH
>>>
>>> Luk
>>>