Re: Printer permissions ??

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

This isn't really the right venue for this but in any case, my answers are
inline.

--
Thanks,
Brian Desmond
Windows Server MVP - Directory Services

www.briandesmond.com


"steve" <stevesemple@xxxxxxxxx> wrote in message
news:1181225578.223379.169140@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Our teacher in college has given us the answers to these questions
below. We need to study them for a test as soon as we get to class.
I m confused by the answers he has given us. They dont make sense to
me eg Q1 and Q2, why "full access" they dont have Manage printers?
Q3 -Well I dont even see a change permission available and dont know
what it means??? Q4 - It doesnt answer the question. Q5 seems like the
only one that looks right since this user has Manage printers and
Manage documents.


Q1 + 2 - Sales Users has print and Managers has manage documents (the only
two rights available). The sum of these is essentially full control
Q3 - this is wrong
Q4 - See mine
Q5 - Yep

Can someone look at this and either help me to understand why the
answers are this way or if they are wrong what the right ones are?

Im confused.

-- Users ---
User1 - Sales Users, Marketing Users, Managers, Domain users
User2 - Help Desk Users, Managers, Domain Users, Domain Admins
User3 - Accounting Users, Domain Users, Project Planners
-- Printers --
LaserJetA -
Sales Users - Print, Managers - Manage Documents, Domain Users -
Print, Everyone - Print, Domain Admins - Manage Printers

LaserJetB -
Domain Users - Manage Documents, Domain Admins - Manage Printers, Help
Desk Users - Print

LaserJetC -
Accounting Users - Print, Project Planners - Print, Everyone - Deny
Print, Help Desk Users -Manage Documents

1. What Permission would User1 have to the LaserJetA printer ? -Full
Control

Right

2. What Permission would User2 have to the LaserJetC printer ? -Full
Control

Nope. They can't print since this is denied to Everyone

3. What Permission would User3 have to the LaserJetB printer ? -
Change

There is no change right ... He can manage docs and print, aka full control

4. What Permission would User1 have to the LaserJetB printer ? -User 2
will be denied access

Manage Documents

5. What Permission would User2 have to the LaserJetA printer ? -Full
Control

Right

6. What Permission would User3 have to the LaserJetC printer ? (he
didnt answer this one but I thing its "Print"

None - the deny print is there and he isn't in a group which has the manage
printers right.

[From page 333 of MCSE Guide to Managing a Microsoft Windows Server
2003 Environment, Enhanced by Dan DiNicolo]



.

Relevant Pages

  • Re: Printer mapping restric access
    ... What application are the users in when they see all printers? ... Your Terminal Services Security Website ... I suspect that either Domain Users or Remote Desktop Users ...
    (microsoft.public.windows.terminal_services)
  • Printer permissions ??
    ... why "full access" they dont have Manage printers? ... User2 - Help Desk Users, Managers, Domain Users, Domain Admins ...
    (microsoft.public.windows.server.active_directory)
  • Migrating HP printers from Nt4 to 2000
    ... All 2000 domain users can access the printers on the old server ... The h/w on the old NT4 PDC is not reliable and I would ...
    (microsoft.public.win2000.general)
  • Re: local printing from the network
    ... I was able to get one to the printers to show up by ... granting permission to the Domain users. ... > permission to the domain user accounts. ... one of the reasons you have a server is for print serving - i.e. ...
    (microsoft.public.windows.server.sbs)
  • Re: Prevent Domain Users from Browsing Active Directory OUs
    ... Because i work in a university and i dont want students to have access ... to computer names and user accounts for staff and etc.... ... >> Is there anyway to to prevent domain users from viewing and browsing ... >> active directory icon located in My network places. ...
    (microsoft.public.win2000.networking)