Access denied error in Windows 7 when trying to connect to network printer
Users are getting an "Access denied" error when trying to connect to a networked printer. We are in a corporate LAN/WAN environment with a centrally located print server. Users had no problem connecting to printers in Windows XP. This is the process we have to use now for users to connect to a networked printer: 1. administrator logs on to the Windows 7 computer to add the printer from the print server (which installs the print driver to the computer) ; 2. adminstrator logs off computer; 3. user logs back onto the computer and then can add that particular printer. Doesn't appear to be a firewall issue since it works fine in Windows XP. This appears to be a setting particular to Windows 7 that is preventing users from adding a print driver to their desktop. Any thoughts to fix would be appreciated. BTW, using group policy to deploy/assign printers is not a complete solution because some locations on the WAN are small and they use desktop printers which are shared with 1 or 2 staff at the same location.
July 23rd, 2010 4:33pm

You are affected by point and print restrictions. disable this in GP. from:http://technet.microsoft.com/en-us/library/cc753269.aspx Using Group Policy to modify printer driver security settings You can use the Point and Print Restrictions Group Policy setting to control how users can install printer drivers from print servers. You can use this setting to permit users to connect to only specific print servers that you trust. Because this setting prevents users from connecting to other print servers that could potentially host malicious or untested printer drivers, you can disable printer driver installation warning messages without adversely compromising security. Carefully evaluate your users' printing needs before limiting which print servers they can connect to. If users occasionally need to connect to shared printers in a branch office or another department, make sure to include those printer servers on the list (if you trust the printer drivers that are installed on the servers). You can also use the Point and Print Restrictions setting to disable warning prompts entirely, although this setting disables the enhanced printer driver installation security of Windows 7 and Windows Server 2008 R2 for these users. Note The following procedure assumes that you are using the version of the Group Policy Management Console (GPMC) that is included with Windows Server 2008 R2. To install GPMC on Windows Server 2008 R2, use the Add Features Wizard of Server Manager. If you are using a different version of GPMC, the steps might vary slightly. To modify the Point and Print Restrictions setting Open the Group Policy Management Console (GPMC). In the GPMC console tree, navigate to the domain or organizational unit (OU) that stores the user accounts for which you want to modify printer driver security settings. Right-click the appropriate domain or OU, click Create a GPO in this domain, and Link it here , type a name for the new GPO, and then click OK . Right-click the GPO that you created and then click Edit . In the Group Policy Management Editor window, click Computer Configuration , click Policies , click Administrative Templates , and then click Printers . Right-click Point and Print Restrictions , and then click Edit . Note The Point and Print Restrictions setting can also be found under User Configuration \Policies \Administrative Templates \Control Panel \Printers . This policy is ignored by Windows 7 and Windows Server 2008 R2, but is enforced by earlier editions of the operation system including versions Windows XP with SP1, Windows Server 2003 with SP1, and Windows Server 2008. We recommend that you change this policy setting in both locations so that all down-level clients have a consistent experience. To permit users to connect only to specific print servers that you trust In the Point and Print Restrictions dialog box, click Enabled . Select the Users can only point and print to these servers check box if it is not already selected. In the text box, type the fully qualified server names to which you want to allow users to connect. Separate each name with a semi-colon. In the When installing drivers for a new connection box, choose Do not show warning or elevation prompt . In the When updating drivers for an existing connection box, choose Show warning only . Click OK .
Free Windows Admin Tool Kit Click here and download it now
July 23rd, 2010 5:52pm

Worked perfectly. Thank you! We also did a work around where we assigned the printers to each OU. However, enabling the Point and Print Restrictions is a better solution because it enables users to add any printer they need which may not necessarily be in their OU. Again, thanks for the response.
July 26th, 2010 4:02pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics