Skip to main content

Hi

Occasionally, users have a message coming up as follows:

"Printtool is trying to modify the printer settings. Type the name and password of a user in the "Print Administrators" group to allow this."

How can I stop this happening? Our machines are bound to an Active Directory, but users are not administrators. How can I add users to the "Print Administrators" group?

Any help would be appreciated.

Thanks

Tim

Pretty sure you can add users with

dseditgroup -o edit -n /Local/Default -a USER_OR_GROUP -t group lpadmin

I think you can even add everyone as the -a name and give all and sundry rights to printing functions.

Sounds good! Would it work to put that into a script and then deploy with a policy?

And would this work for any user accounts that is then subsequently created?

You would have it a script in a policy.
If your wanting any user of any type to have printer admin rights it sufficient to run 

dseditgroup -o edit -n /Local/Default -a everyone -t group lpadmin

Once per machine.
If your wanting a little more control than that you would need to either add another group they are in (once) or have it add each new user once on first login somehow.
You can check someones status at any time with

dseditgroup -o checkmember -m USERNAME_TO_CHECK lpadmin
Terms & ConditionsCookie settingsAccessibility statement