You do not have sufficient access to your computer to connect to the selected printer

[altior]

Hi
We a Windows 2003 sp1 server which is a TS server and a backup dc.
When a user logs in they get the default printers that are loaded through the group policy fine. If they want to add a network printer it gives this error "You do not have sufficient access to your computer to connect to the selected printer". I read these solution from Microsoft http://support.microsoft.com/kb/259937/en-us but there are no local policies on a DC and it even says in the article I shouldn't get this error but I am.
I have checked the printer permissions and nothing unusual there.
If the user logs in from their normal pc they can add/remove so it doesn't seem to be anything in the user account.
Any suggestions?
Thanks
Jared

[Meinolf Weber]

Hello altior,

Security settings on a DC are mostly higher then normal workstations, which
is good. You shouldn't use a DC as a Terminal server, so that you do not
have to lower the security on it to get users working. And as i said before,
use a member server for TS functionality.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Hi
> We a Windows 2003 sp1 server which is a TS server and a backup dc.
> When a user logs in they get the default printers that are loaded
> through the group policy fine. If they want to add a network printer
> it
> gives this error "You do not have sufficient access to your computer
> to
> connect to the selected printer". I read these solution from Microsoft
> http://support.microsoft.com/kb/259937/en-us but there are no local
> policies on a DC and it even says in the article I shouldn't get this
> error but I am.
> I have checked the printer permissions and nothing unusual there.
> If the user logs in from their normal pc they can add/remove so it
> doesn't seem to be anything in the user account.
> Any suggestions?
> Thanks
> Jared
> http://forums.techarena.in
>

[Florian Frommherz [MVP]]

Howdie!

altior schrieb:
> Hi
> We a Windows 2003 sp1 server which is a TS server and a backup dc.
> When a user logs in they get the default printers that are loaded
> through the group policy fine. If they want to add a network printer it
> gives this error "You do not have sufficient access to your computer to
> connect to the selected printer". I read these solution from Microsoft
> http://support.microsoft.com/kb/259937/en-us but there are no local
> policies on a DC and it even says in the article I shouldn't get this
> error but I am.
> I have checked the printer permissions and nothing unusual there.
> If the user logs in from their normal pc they can add/remove so it
> doesn't seem to be anything in the user account.
> Any suggestions?

- Check the Default Domain Policy
- Check the Default Domain Controller Policy
- For the long run: get yourself another server and install TS on the
new server. Remove the TS role from the second DC. IT ain't good having
people logging on to a DC - even through TS.

cheers,

Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Use a newsreader! http://www.frickelsoft.net/news.html

[altior]

Thanks for the replies they lead me to the answer:

In the Default Domain Controller Policy - allow users to add printer drivers - which is set to denied on servers by default. I changed it and everyting works great now.

[Meinolf Weber]

Hello altior,

Thanks for the feedback. BUT really think about the separate server to TS.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Thanks for the replies they lead me to the answer:
>
> In the Default Domain Controller Policy - allow users to add printer
> drivers - which is set to denied on servers by default. I changed it
> and everyting works great now.
>
> http://forums.techarena.in
>