Privilege Manager for Windows does not elevate the users permission to allow for printer driver installation.
This can be done using a Group Policy.
1. The Driver Installation policy is located in the Group Policy Management Console (GPMC):
Computer Configuration | Policies | Administrative Templates | System | Driver Installation
The setting is called "Allow non-administrators to install drivers for these devices setup classes". In this policy there is a need to add the Device Class GUID of the device you are trying to allow.
Printers
ClassGuid = {4d36e979-e325-11ce-bfc1-08002be10318}
NOTE: The GUIDs can be found here: Device Class GUIDS
The Location of the settings can be found in the Group Policy Management Console:
You can configure the Point and Print Restrictions Group Policy setting in any of the following ways:
If you set the policy setting to Enabled and you select the Users can only Point and Print to machines in their Forest check box, users can use the Point and Print functionality to select only computers that have active computer accounts in the same forest as the user.
Note Cross-forest trust relationships are not supported by this policy setting. This is so that this policy setting can be effective for shared printers in Windows NT 4.0 and later environments.
If you set the policy setting to Enabled and you select the Users can only Point and Print to these servers check box, users can use the Point and Print functionality to select only the servers that are listed. When you add servers to this list, you must use their fully qualified domain names (FQDNs) and use a semi-colon (;) to separate the FQDNs. Also, you cannot put any spaces between the FQDNs and the semicolon (;). For example:
To locate the FQDN of a server, click the Computer Name tab in System Properties.
If you set the policy to Enabled and you select both the Users can only Point and Print to machines in their Forest check box and the Users can only Point and Print to these servers check box, users can use the Point and Print functionality to select any server in their forest and any servers that are explicitly listed. You can use this configuration to grant the user the ability to use the Point and Print functionality to select any server in their forest and specific servers that are outside the forest.
If you set the policy to Disabled, users can use the Point and Print functionality to select any shared printer they have access to.
By default, this policy setting is not configured. If you do not configure this policy setting, users cannot download Point and Print drivers from computers that are not in their Active Directory forest. The result of not configuring the setting is the same as enabling the policy and setting it to Users can only Point and Print to machines in their Forest.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Nutzungsbedingungen Datenschutz Cookie Preference Center