How to remotely administer a printer through a network share when you use Windows XP Service Pack 2 in a workgroup environment (870903)


The information in this article applies to:

  • Microsoft Windows XP Professional Service Pack 2 (SP2)

SUMMARY

In a Microsoft Windows XP Service Pack 2 (SP2) workgroup environment, you can configure remote administrative access so that an administrator can manage a printer through a network share. You can configure the "Network access: Sharing and security model for local accounts" local policy setting so that a remote administrator must log on to the network share by using local logon credentials instead of by using the Guest account.

In this task

INTRODUCTION

This step-by-step article describes how to permit remote access to a printer through a network share in a Microsoft Windows XP Service Pack 2 (SP2) workgroup environment. To do this, you can set the "Network access: Sharing and security model for local accounts" local policy setting to Classic - local users authenticate as themselves. By using this setting, administrators must use local logon credentials to remotely administer the printer when they access the printer through the share.

We do not recommend that you permit remote administrator access by using the Guest only - local users authenticate as Guest setting. If you use the Guest only - local users authenticate as Guest setting and add the Guest user account to the Administrators group, any user who can access your computer over the network can administer your computer.

back to the top

Share the printer

To permit remote access to your printer, you must share the printer.

Note If Windows Firewall is turned on with file and print sharing blocked, file and print sharing is automatically added to the Windows Firewall exceptions list when you share the printer.

To share the printer, follow these steps:
  1. Log on to the computer by using an account that has administrative credentials.
  2. Click Start, and then click Printers and Faxes.
  3. Right-click the printer that you want to share, and then click Sharing.
  4. On the Sharing tab, click Share this printer.
  5. Type the share name in the Share name box, and then click OK.
back to the top

Configure the "Network access: Sharing and security model for local accounts" local policy setting

Follow these steps on the computer that has the shared printer:
  1. Log on to the computer by using an account that has administrative credentials.
  2. Click Start, click Run, type secpol.msc in the Open box, and then click OK.
  3. Expand Local Policies, and then click Security Options.
  4. Right-click the Network access: Sharing and security model for local accounts policy setting, and then click Properties.
  5. Click Classic - local users authenticate as themselves, and then click OK.
  6. Quit the Local Security Settings snap-in.
back to the top

Access the printer share as a remote administrator

You can use either of the following methods to administer the remote printer.

Method 1

  1. On the computer that you want to remotely administer the printer from, click Start, click Run, type \\Print_Server_Name, in the Open box, and then click OK.

    Note Print_Server_Name is the computer name or the IP address of computer that has the shared printer.
  2. When you are prompted, type the user name of an account that has administrative credentials on the print server in the User name box, type the account password in the Password box, and then click OK.

    Note If you do not want to type logon credentials to access the printer share, you can create an account on the computer that you want to remotely administer the printer from that has the same user name and password as the account that has administrative rights on the print server. If you log on as that account, you will not have to type credentials when you connect to the printer share.
  3. Double-click Printers and Faxes, right-click the shared printer, and then click Properties.

    You now have administrative rights to the printer.

Method 2

You can also use the Run as command to administer the printer if you add the shared printer to the computer that you want to remotely administer the printer from.

To add the shared printer, follow these steps:
  1. Click Start, click Run, type \\Print_Server_Name, in the Open box, and then click OK.
  2. When you are prompted, type the user name of an account that has administrative credentials on the print server in the User name box, type the account password in the Password box, and then click OK.
  3. Right-click the shared printer, click Connect, and then click Yes to install the print driver.
To use the Run as command to administer the printer, follow these steps:
  1. Click Start, and then click Printers and Faxes.
  2. Press and hold the SHIFT key, right-click the printer, point to Run as, and then click Properties.
  3. Under Which user account do you want to use to run this program?, click The following user.
  4. Type the user name and the password of an account that has local administrative credentials on the print server, and then click OK.

    You now have administrative rights to the printer.
back to the top

REFERENCES

For additional information about how to use the "Run as" command, click the following article number to view the article in the Microsoft Knowledge Base:

294676 How to enable and use the "Run as" command when running programs in Windows

back to the top
Modification Type:MinorLast Reviewed:7/8/2005
Keywords:kbtshoot kbusage kbpermissions kbSecurity kbConfig kbHOWTOmaster kbnetwork kbprint kbhowto kbinfo KB870903 kbAudITPRO kbAudEndUser
©2004 Microsoft Corporation. All rights reserved.