RE: delegation of printer administration...

Print operators allows the users to install printer drivers as well as create
and delete printers and manage print queues.

Clearing the queues can be done by permissions on the printers as well.

Adding a user to the Print Operators group, will achieve what you want.
However, as a note of caution, don't use the print operators group. This
group is a built-in local group and is therefore a slight security risk.
Create a new domain-local group and add the users into this. Then use
restricted groups to add this group to the local power users group (if you
can), or you will have to create a new print-operators type group that you
add to your workstation images, on member servers and workstations.

The other alternative is to ACL all the printers yourself...


A little info. on some of the thing's mentioned:

HOW-TO: Add domain-groups to local workstation groups using Restricted
Groups or a startup script:
-- http://www.msresource.net/content/view/45/47/


HOW-TO: Filter GPO:
-- http://www.msresource.net/content/view/15/47/


--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net


.

Relevant Pages

  • RE: delegation of printer administration...
    ... when users log on, and deleted when they log off. ... > and delete printers and manage print queues. ... > Adding a user to the Print Operators group, ... > add to your workstation images, on member servers and workstations. ...
    (microsoft.public.windows.server.active_directory)
  • Cant Print from DOS Prompt as User / Admin OK ??
    ... printing without the Net Use. ... >My client needs to print from a DOS app. ... The network printers are setup as ... >the user is just in Domain Users or Print Operators ...
    (microsoft.public.windows.server.sbs)
  • Re: Conflicting effective permissions (DC ADUC & workstation/mbr s
    ... Look for print operators, ... >> permissions on a print server, you have to manually add the permission. ... >> had to go back and add this to 140+ printers. ...
    (microsoft.public.windows.server.active_directory)
  • Re: add permission to printers in Terminal server 2003
    ... Does this only happen for auto-created printers, i.e. if you (as an administrator) add a local printer, can they manage it? ... If so, but they can't manage auto-created printers, maybe they need full control of the RDP-Tcp Connection. ... Microsoft MVP - Terminal Server ... >> By default, members of the Administrators, Print Operators, Server Operators, and Power Users groups have Manage Printers permission, which allows them to take ownership of a printer. ...
    (microsoft.public.win2000.termserv.clients)
  • Print jobs disappear
    ... of the print queues stopped working properly. ... port, then the user prints to the LPT port, the network ... I did was check the user rights on the printers. ...
    (microsoft.public.win2000.printing)