If LPTn is mapped to a local parallel port, a non-administrator's attempt at
net use LPTn \\Server\PrinterShare
will NOT remap the port.
NOTE: If LPTn is NOT mapped to a local parallel port, a non-administrator can map it.
To workaround this security feature in a domain environment, use
tip 4628 to run
devcon disable *PNP0401 in a startup script
(Computer Configuration\Windows Settings\Scripts (Startup/Shutdown)\Startup).
NOTE: *PNP0401 is for LPT1. To find the hardware ID for the other LPT ports, run the following script:
@echo off setlocal for /f "Tokens=*" %%i in ('devcon findall *') do @set line=%%i&call :LPT endlocal goto :EOF :LPT set line=%line:&=% set work=%line:(LPT=% if not "%line%" EQU "%work%" @echo %line%