Non Admin Adding Printer

[#1]

I set up a managed preference for non admin users to add printers. I scoped it to one computer and rebooted. This machine still has a padlock and cannot add/remove or pause a printer. Does anyone else do this via Manage Preferences?

---

Kathie Iorizzo
Lower School Technician
The Latin School of Chicago
kiorizzo at latinschool.org
312.582.6136

[abenedict]

It doesn't allow users to add printers from System Preferences, it
will let them add one by selecting add printer from the printer drop
down menu when they are trying to print.  I personally could not get
that managed pref to work.  I ended up creating a policy that executed
the command  dscl . -append /Groups/_lpadmin GroupMembership $3
That will add the user to the lpadmin group and all of my problems
were solved. If anyone can figure out how to get the managed pref to
work, I would love to hear how.
:)

--
Alan Benedict
?
Macintosh Technician
The Integer Group
O: 515-247-2738
C: 515-770-8234
http://www.integer.com

[tlarkin]

Maybe I am off on this, but isn't every user a member of _lpadmin?

---

Thomas Larkin
TIS Department
KCKPS USD500
tlarki at kckps.org
blackberry: 913-449-7589
office: 913-627-0351

[ernstcs]

In 10.5.8 it is for sure broke, even for admins from what I can tell so we've even had to add the admin group back into the _lpadmin group!

Craig Ernst
UW-Eau Claire
(715) 836-3639

Sent from my iPhone

[Bukira]

No tom only admins are added to lpadmin, I just added my AD all users group to lpadmin, I used the caspers managed prefs as well so sorry I can't say which one fixed it, but it works fine for me, the padlock is still in the sys perfs but the + and - are active for any user so u can add and delete printers without unlocking the padlock, u can also pause and resemue print queues and delete jobs

Criss

[#6]

How do you ad them to the group? Are you using OD?

Sent from my iPhone on T-Mobile

[#7]

I had this problem but only with PPC machines. Copy the /etc/authorization file from a working Intel machine to the PPC machines fixed this printing issue for me.

- JD

[#8]

One way to add a user to the lpadmin group is to setup a policy to issue the following command:

dscl . append /Groups/lpadmin GroupMembership username

We've used this to add in a building level tech account besides the system admin account.

Jason Weber
Technology Support Cluster Specialist
Independent School District 196
jason.weber at district196.org

[#9]

To get a non-admin account or a network based Active Directory or Open
Directory account to be able to add a printer without password
authorization, you can also edit /etc/cups/cupsd.conf

Look for the following lines:

# All administration operations require an administrator to
authenticate... <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class
CUPS-Delete-Class CUPS-Set-Default> AuthType Default Require user @SYSTEM Order deny,allow </Limit>

and comment two of the lines to look like this...

# All administration operations require an administrator to
authenticate... <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class
CUPS-Delete-Class CUPS-Set-Default> # AuthType Default # Require user @SYSTEM Order deny,allow </Limit>

Once that is done, reboot the computer. That will allow a user to add a
printer from an application when printer. As in, when they are in
Microsoft Word for example, they navigate to File--> Print, in the print
window they will be able to choose Add Printer and not be prompted for a
password. The Print & Fax PreferencePane is still password protected so no
user (other than an admin) will be able to add a printer from that
location.

I built this in as a part fo my image, but I also created a package and
policy to automatically push it out to machines that were imaged prior to
this fix being put in place.

Steve

--
Steven Diver, Network Manager
Adlai E. Stevenson High School / www.d125.org
Email: sdiver at d125.org / Phone: 847.415.4304

"Be not simply good, be good for something."
-Henry David Thoreau (1817-1862)