My users are merely guests, so I know it is not necessary to have them as local Power Users. I have the policy file set to allow point-and-print additions I suppose. The way I add printers is from VBScript, but this idea looks more elegant (if it will work for me).
---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | | Ryan Novosielski - Jr. UNIX Systems Admin |$&| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630 On Tue, 13 Jan 2004, Andrew Gaffney wrote: > John H Terpstra wrote: > > On Tue, 13 Jan 2004, Andrew Gaffney wrote: > > > > > >>John H Terpstra wrote: > >> > >>>On Tue, 13 Jan 2004, Andrew Gaffney wrote: > >>> > >>> > >>> > >>>>John H Terpstra wrote: > >>>> > >>>> > >>>>>On Tue, 13 Jan 2004, Andrew Gaffney wrote: > >>>>> > >>>>> > >>>>> > >>>>> > >>>>>>Kurt Pfeifle wrote: > >>>>>> > >>>>>> > >>>>>> > >>>>>>>>[Samba] adding printers from netlogon script > >>>>>>>>Andrew Gaffney agaffney at technaut.darktalker.net > >>>>>>>>Tue Dec 9 20:10:07 GMT 2003 > >>>>>>>> > >>>>>>>> > >>>>>>>>While this doesn't relate specifically to Samba, I need to do this in > >>>>>>>>a netlogon .bat file in a Samba domain. In my network, I have a > >>>>>>>>printer hooked to a JetDirect so that it is a TCP/IP printer. Is there > >>>>>>>>a way I can automatically have this printer mapped/added when the user > >>>>>>>>is logged on? > >>>>>>>> > >>>>>>> > >>>>>>>Test this command from a "DOS box": > >>>>>>> > >>>>>>> rundll32 printui.dll,PrintUIEntry /in /n > >>>>>>>\\printerserver\printersharename > >>>>>>> > >>>>>>>If it works, it can go into the logon script. (Of course "printersharename" > >>>>>>>needs to exist on "printerserver" and must have printer driver deposited on > >>>>>>>the server's [print$]-share for "point'n'print" download...). And: > >>>>>>> > >>>>>>> rundll32 printui.dll,PrintUIEntriy /? > >>>>>>> > >>>>>>>will show up a full "man page" (hehe...) > >>>>>>> > >>>>>>>See also > >>>>>>> > >>>>>>> http://de.samba.org/samba/docs/man/printing.html#id2931140 > >>>>>> > >>>>>>I used the above and some other references and pieced togethere a few commands > >>>>>>to auto-map > >>>>>>network printers at logon: > >>>>>> > >>>>>>REM rundll32 printui.dll,PrintUIEntry /ia /m "Ricoh Aficio 200/250 PCL" /h > >>>>>>"Intel" /v > >>>>>>"Windows 2000" /f %windir%\inf\ntprint.inf > >>>>>>rundll32 printui.dll,PrintUIEntry /if /b "Hallway Printer" /f > >>>>>>%windir%\inf\ntprint.inf /r > >>>>>>"\\skyline\jetdirect" /m "Ricoh Aficio 200/250 PCL" > >>>>>> > >>>>>>These work just fine...as long as the user is an administrator. If the user > >>>>>>logging on is > >>>>>>a regular user, which most are, it give me "Access denied" when trying to map > >>>>>>the printer, > >>>>>>on the same computer. These commands are being run from the netlogon.bat > >>>>>>script that runs > >>>>>>at logon. Am I missing something? > >>>>> > >>>>> > >>>>>Indeed you are. Windows NT/200x/XP requires you to explicitly give the > >>>>>user the rights to make changes. If I am not mistaken, you can get around > >>>>>this by adding the Domain Users group to the Local Power Users group on > >>>>>each workstation. > >>>> > >>>>What rights does a normal user have by default? Can they map a network drive? > >>> > >>> > >>>Default rights do not permit the user to change any system settings, not > >>>even the time. > >>> > >>>Once logged in an authenticated network user can map a drive if he/she has > >>>access to the target resouce. Since printers require installation of > >>>driver files, this is not permitted by default user settings. > >> > >>Is there no way to add printers from a netlogon script without the user being a > >>Power User > >>or higher? > > > > > > That question is best answered by Microsoft. Have you checked the > > Microsoft Knowledge Base? > > > > My interpretation of your question is, "Is there no way to give users a > > privilege they do not have without giving them the privilege they need?" > > > > Logically, my answer is - No. No way. But my logic is flawed, so do not > > take my answer as gospel. > > I hadn't even thought about consulting the MS KB, even though this problem isn't > technically Samba related and is definately MS related and involves using their > tools ;) > > -- > Andrew Gaffney > System Administrator > Skyline Aeronautics, LLC. > 776 North Bell Avenue > Chesterfield, MO 63005 > 636-357-1548 > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
