Normal user cannot add a network printer on a Terminal Server
By default Windows 2000 and 2003 terminal services does not allow a non administration account to add a printer when they log onto a remote desktop connection. When they do attempt to install a printer the user gets the following error message.
You do not have sufficient access to your computer to connect to the selected printer.
To allow users to add a network printer either manually or via a logon script you will need to do the following:
- Open up local security policy by clicking “Start -> Programs -> Administrative Tools -> Local Security Policy“.
- Open Local Policies
- Open Security Policies
- On the Right hand side double-click “Prevent users from installing printer drivers”
- Click on Disabled and then Ok and then Close the Local Security Policy window.
- Reboot the computer
Apparently you can do a gpupdate /force (win 2003) or a secedit /REFRESHPOLICY MACHINE_POLICY /enforce (windows 2000) instead of rebooting but I have not tried that myself and its been just as easy to reboot the server.
You can also set this setting on the Terminal Servers OU through group policy if you have multiple Terminal Servers to save time.






