When my students go to print, there is a lock icon next to the printer, and requires the local admin password to print. I cannot find in profile manager to "unlock the printer", let alone lock the printer. Using 10.8 Client, 10.9 server. Thank you for your help.
Mac OS X (10.7.3), Lion Server
I have not seen exactly what you describe but I do find that 'normal' level users cannot un-pause a printer queue. The queue might become paused if there was a previous printing problem. Admin level users can do this but typically students and normal users within businesses would not be given Admin level access.
To get round this I have pre-configured all my Macs to give even normal level users the ability to un-pause printer queues, the same steps may solve your problem.
sudo /usr/bin/security authorizationdb write system.print.operator allow
sudo /usr/sbin/dseditgroup -o edit -n /Local/Default -a everyone -t group lpadmin
You can do this in Terminal.app locally on a Mac but it is easier for a larger number of machines to do this via a Mac management system such as Apple Remote Desktop. In my case I also now have it incorporated in to my DeployStudio setup workflow. You could also create a payload free installer package and push that out to run those commands as part of a shell script on all your Macs.
I have not seen exactly what you describe but I do find that 'normal' level users cannot un-pause a printer queue. The queue might become paused if there was a previous printing problem. Admin level users can do this but typically students and normal users within businesses would not be given Admin level access.
To get round this I have pre-configured all my Macs to give even normal level users the ability to un-pause printer queues, the same steps may solve your problem.
sudo /usr/bin/security authorizationdb write system.print.operator allow
sudo /usr/sbin/dseditgroup -o edit -n /Local/Default -a everyone -t group lpadmin
You can do this in Terminal.app locally on a Mac but it is easier for a larger number of machines to do this via a Mac management system such as Apple Remote Desktop. In my case I also now have it incorporated in to my DeployStudio setup workflow. You could also create a payload free installer package and push that out to run those commands as part of a shell script on all your Macs.
reset printers from the system preferences printers window. Click on any printer with control key down, or on the blank list window to reset.
janthenat wrote:
Are both commands really necessary for this? I've been using only "security authorizationdb write system.print.operator allow" in my DeployStudio workflow and it is working as far as I know. I suppose it wouldn't hurt to have them both, eh?
It's a long time since I found the info that I used for my answer and I am now struggling to remember why there are two lines. However I think it is so that 'normal' users can both unpause a printer queue which is what you want, and also have permission to add a printer and trigger the automatic downloading of the drivers from Apple via Software Update.
For major brands like HP, Canon, Lexmark, Epson, etc. you don't have to specifically download and manually install the drivers this can happen automatically via as mentioned the Apple Software Update service.
Sadly Konica-Minolta are one of the few brands not covered by this service.
Are both commands really necessary for this? I've been using only "security authorizationdb write system.print.operator allow" in my DeployStudio workflow and it is working as far as I know. I suppose it wouldn't hurt to have them both, eh?
This is what I am talking about, when a user goes to print, the printer is locked.
Never mind I figured it out, I needed to uncheck the box in profile manager.
Printer Locked
