Posted on 12-08-2015 01:41 PM
Hi
Occasionally, users have a message coming up as follows:
"Printtool is trying to modify the printer settings. Type the name and password of a user in the "Print Administrators" group to allow this."
How can I stop this happening? Our machines are bound to an Active Directory, but users are not administrators. How can I add users to the "Print Administrators" group?
Any help would be appreciated.
Thanks
Tim
Posted on 12-08-2015 02:10 PM
Pretty sure you can add users with
dseditgroup -o edit -n /Local/Default -a USER_OR_GROUP -t group lpadmin
I think you can even add everyone as the -a name and give all and sundry rights to printing functions.
Posted on 12-08-2015 02:23 PM
Sounds good! Would it work to put that into a script and then deploy with a policy?
Posted on 12-08-2015 02:25 PM
And would this work for any user accounts that is then subsequently created?
Posted on 12-08-2015 04:58 PM
You would have it a script in a policy.
If your wanting any user of any type to have printer admin rights it sufficient to run
dseditgroup -o edit -n /Local/Default -a everyone -t group lpadmin
Once per machine.
If your wanting a little more control than that you would need to either add another group they are in (once) or have it add each new user once on first login somehow.
You can check someones status at any time with
dseditgroup -o checkmember -m USERNAME_TO_CHECK lpadmin