Unable to add/remote printers - even as an admin!

[Halfmad]

Hi peeps,

 

rather odd problem, I'm using an old image created by my predecessor and I'm guessing he used local GP to lock down certain parts of it. Even when logged in as a domain admin, which gets local admin rights I can't delete or add printers to the computer.

 

I can however do it if I go into the local GP settings (gpedit.msc) and specifically set the restriction for "prevent deletion of printers" to DISABLED, however by default these settings are set to "not configured" which makes me wonder where it's getting the restrictions from!

 

It's the only PC on the network that I have this problem with, even when logged in as a local admin I'm restricted so I was wondering if perhaps somehow the default user for the PC has been configured to be restricted and this is having a knock on affect with every subsequent user, regardless of domain permissions.

 

Hope that makes sense, I'm about to sysprep this image but won't do so until I know it's as damn near perfect as I can get! At the moment I can work around this fault but it's just got me wondering about the local verus domain permissions

[Geoff]

Domain GPO settings override Local ones.

[Halfmad]

I thought so.

 

Makes it even more mysterious I'll check my domain GPO but I don't think there's anything in there that ever restricts admins - as you'd expect.

[mrforgetful]

I've had this problem a couple of times ages ago, the only thing I could do was reimage it!

[Geoff]

Well if the Domain GPO settings for whatever is causing this are set to 'not configured' but it's enabled/disabled in the Local GPO settings. Then the Local GPO settings will take affect.