Добрый день, коллеги.
Решил я поднять сервер печати на Фришке.
Установил Samba, ввел компьютер в домен, установил cups, установил hplip, gimp.
Но вот незадача, расшаренные принтеры могут установить только администраторы домена.
При попытке установить принтер обычным пользователем из под XP вываливается такое сообщение

   на данном компьютере существует политика препятствующая подключению к этой очереди печати

Привожу свои конфиги:
smb.conf:

    [printers]
       comment = All Printers
       path = /var/spool/samba34
       browseable = no
       guest ok = yes
       writable = no
       printable = yes
       printer admin = root
    [print$]
            comment = Printer Drivers
            path = /usr/local/share/cups/drivers
            browseable = yes
            # guest ok = yes works too
            guest ok = no
            read only = yes
            write list = root
    # This one is useful for people to share files
    ;[tmp]
    ;   comment = Temporary file space
    ;   path = /tmp
    ;   read only = no
    ;   public = yes

    # A publicly accessible directory, but read only, except for people in
    # the "staff" group
    [printer drivers]
       comment = Public Stuff
       path = /home/drivers
       public = yes
       writable = yes
       printable = no
       write list = @ac-construction.local

cupsd.conf:

LogLevel debug
    SystemGroup wheel
    # Allow remote access
    Port 631
    Listen /var/run/cups.sock
    # Enable printer sharing and shared printers.
    Browsing On
    BrowseOrder allow,deny
    BrowseAllow all
    BrowseRemoteProtocols CUPS
    BrowseAddress @LOCAL
    BrowseLocalProtocols CUPS
    DefaultAuthType Basic
    DefaultEncryption IfRequested
    AuthClass System
    <Location />
      # Allow shared printing and remote administration...
      Order allow,deny
      Allow all
    </Location>
    <Location /admin>
      # Allow remote administration...
      Order allow,deny
      Allow all
    </Location>
    <Location /admin/conf>
      AuthType Basic
      # Allow remote access to the configuration files...
      Order allow,deny
      Allow all
    </Location>
    <Policy default>
      <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job CUPS-Move-Job CUPS-Get-Document>
        Require user @OWNER @SYSTEM
        Order deny,allow
      </Limit>
      <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default CUPS-Get-Devices>
        AuthType Default
        Require user @SYSTEM
        Order deny,allow
      </Limit>
      <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After CUPS-Accept-Jobs CUPS-Reject-Jobs>
        AuthType Default
        Require user @SYSTEM
        Order deny,allow
      </Limit>
      <Limit CUPS-Authenticate-Job>
        Require user @OWNER @SYSTEM
        Order deny,allow
      </Limit>
      <Limit All>
        Order deny,allow
      </Limit>
    </Policy>
    <Policy authenticated>
      <Limit Create-Job Print-Job Print-URI>
      AuthType Default
      Order deny,allow
    </Limit>
      <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job CUPS-Move-Job CUPS-Get-Document>
    AuthType Default
    Require user @OWNER @SYSTEM
    Order deny,allow
      </Limit>
      <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
      AuthType Default
      Require user @SYSTEM
      Order deny,allow
        </Limit>
      <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After CUPS-Accept-Jobs CUPS-Reject-Jobs>
        AuthType Default
        Require user @SYSTEM
        Order deny,allow
          </Limit>
      <Limit Cancel-Job CUPS-Authenticate-Job>
          AuthType Default
          Require user @OWNER @SYSTEM
          Order deny,allow
            </Limit>
      <Limit All>
            Order deny,allow
              </Limit>
    </Policy>