Inherited permissions for printers

From: Paul Hadfield (paul_at_anon.com)
Date: 01/11/05 

Date: Tue, 11 Jan 2005 09:18:22 -0000

All,

I realise this is a printing question, but I think it's probably more GPO/AD
related too.

Is there any way that permissions for locally installed printers on a
Windows 2000 Advanced server can be set to inherit in the same way that
files and folders can? E.g. when someone creates a new local printer, I want
to be able to specify what the default security permissions will be set to.

We have a Windows 2000 domain with print queues set up locally on Windows
2000 Advanced Server member servers. I'm trying to set up our member servers
so that when a member of the domain security group "IT Helpdesk Staff"
creates a new local printer, the correct permissions are automatically
assigned to it and all the IT staff needs to do is add the relevant User
groups with print access.

The domain secirity group "IT Helpdesk Staff" has only domain user rights
but is also a member of the local Power Users group on the Windows 2000
member servers, and so has full permissions to create new printers locally.

Thanks again,
Paul.

Relevant Pages

  • Inherited Permissions for Printers
    ... to be able to specify what the default security permissions will be set to. ... We have a Windows 2000 domain with print queues set up locally on Windows ... 2000 Advanced Server member servers. ... and so has full permissions to create new printers locally. ...
    (microsoft.public.win2000.active_directory)
  • Re: passwording network printer
    ... You can apply NTFS permissions to printers as you would any other object. ... "Windows NT allows one process to take on the security attributes of another through a technique called impersonation. ...
    (microsoft.public.win2000.general)
  • Default permissions of redirected printers?
    ... the default permissions on redirected client ... printers included the "Manage Printers" right for the connecting user. ... But now in Windows 2003, ...
    (microsoft.public.windows.terminal_services)
  • RE: delegation of printer administration...
    ... when users log on, and deleted when they log off. ... > and delete printers and manage print queues. ... > Adding a user to the Print Operators group, ... > add to your workstation images, on member servers and workstations. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Determine what permissions a group has?
    ... For AD permissions, you need DSACLS.exe. ... The permissions are stored in the ACL of the resource, not the group, ... your list of printers and roll through those or you could put ... so that you could poll the membership of one master list to get the ...
    (microsoft.public.scripting.vbscript)