RE: delegation of printer administration...

Paul,

Thanks for your response. However, it will not work in this situation. These
are member servers, running Citrix Metaframe...all printers are autocreated
when users log on, and deleted when they log off. Print operator is only for
print servers if I'm not mistaken.

Any ideas on how to create the equivalent of "print operator" group on a
regular member server, without giving administrator or power user type
priviledges?

Thanks!

"Paul Williams [MVP]" wrote:

> Print operators allows the users to install printer drivers as well as create
> and delete printers and manage print queues.
>
> Clearing the queues can be done by permissions on the printers as well.
>
> Adding a user to the Print Operators group, will achieve what you want.
> However, as a note of caution, don't use the print operators group. This
> group is a built-in local group and is therefore a slight security risk.
> Create a new domain-local group and add the users into this. Then use
> restricted groups to add this group to the local power users group (if you
> can), or you will have to create a new print-operators type group that you
> add to your workstation images, on member servers and workstations.
>
> The other alternative is to ACL all the printers yourself...
>
>
> A little info. on some of the thing's mentioned:
>
> HOW-TO: Add domain-groups to local workstation groups using Restricted
> Groups or a startup script:
> -- http://www.msresource.net/content/view/45/47/
>
>
> HOW-TO: Filter GPO:
> -- http://www.msresource.net/content/view/15/47/
>
>
> --
> Paul Williams
> Microsoft MVP - Windows Server - Directory Services
> http://www.msresource.net | http://forums.msresource.net
>
>
.

Relevant Pages

  • RE: delegation of printer administration...
    ... and delete printers and manage print queues. ... Clearing the queues can be done by permissions on the printers as well. ... Adding a user to the Print Operators group, ... Add domain-groups to local workstation groups using Restricted ...
    (microsoft.public.windows.server.active_directory)
  • Inherited permissions for printers
    ... to be able to specify what the default security permissions will be set to. ... We have a Windows 2000 domain with print queues set up locally on Windows ... 2000 Advanced Server member servers. ... and so has full permissions to create new printers locally. ...
    (microsoft.public.win2000.active_directory)
  • Inherited Permissions for Printers
    ... to be able to specify what the default security permissions will be set to. ... We have a Windows 2000 domain with print queues set up locally on Windows ... 2000 Advanced Server member servers. ... and so has full permissions to create new printers locally. ...
    (microsoft.public.win2000.active_directory)
  • Cant Print from DOS Prompt as User / Admin OK ??
    ... printing without the Net Use. ... >My client needs to print from a DOS app. ... The network printers are setup as ... >the user is just in Domain Users or Print Operators ...
    (microsoft.public.windows.server.sbs)
  • Re: Conflicting effective permissions (DC ADUC & workstation/mbr s
    ... Look for print operators, ... >> permissions on a print server, you have to manually add the permission. ... >> had to go back and add this to 140+ printers. ...
    (microsoft.public.windows.server.active_directory)
Loading