Re: Print Admin Permissions on a Cluster
- From: "Ryan Sokolowski [MVP - Avanade]" <ryan@xxxxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 25 Apr 2005 13:29:31 -0700
Please reference the Windows Server System Reference Architecture (WSSRA)
information here:
http://www.microsoft.com/technet/itsolutions/wssra/raguide/default.mspx or
more specifically the Enterprise Design for Print Services section here:
http://www.microsoft.com/technet/itsolutions/wssra/raguide/FileandPrintServices/igfpbp_3.mspx
You'll likely need to get a bit more granular with your permissioning on the
Print Server Admins group and possibly use Group Policy to better leverage
the investment in architecting time...
Just off the cuff, I'd consider creating an OU for all the printers, throw
them in and run through the Delegation of Control Wizard. Select "Create a
custom task to delegate" and then select "only the following objects in the
folder" and pick "Printer Objects" and select the two (2) check boxes at the
bottom to "Create..." and "Delete..." and "Next"
Now you can have all sorts of fun on the next screen getting really granular
if you select "Property-specific", but you'll likely be OK with just General
as you're delegating with regards to Printer objects only.
Hope this gets you there...
--
Ryan Sokolowski
MVP - Windows Server - Clustering
MCSE, CCNA, CCDA, BCFP
Avanade
http://www.Avanade.com
"A troubleshooter's best tool is the Event Viewer and understanding the
events and messages contained therein."
This posting is provided "AS IS" with no warranties, and confers no rights.
"Kevin K" <KevinK@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A7E7843C-D49C-4A66-8BFC-2CB1FF34B9D4@xxxxxxxxxxxxxxxx
> We do not want our Print Admins to have admin rights to the File/Print
> Cluster. (trust me, it wouldn't be pretty).
>
> How do we configure security such that Print Admins can still adminster
> printers on the cluster, without having admin rights to the file system or
> cluster administrator?
>
> We can compromise on print driver installation (having admins do this),
> but
> if we can't find a way to let our Print Admins create/modify/delete
> printers,
> then we can not use the Windows Cluster for printing and will have to buy
> new
> hardware (which would not please management :)
>
> We are running HP-branded Windows Storage Server 2003 with SP1.
>
> Thanks!
.
- References:
- Print Admin Permissions on a Cluster
- From: Kevin K
- Print Admin Permissions on a Cluster
- Prev by Date: Re: Failover behaviour on a 2 node cluster
- Next by Date: Re: joining win2k3 node to win2k cluster
- Previous by thread: Print Admin Permissions on a Cluster
- Next by thread: 2 node cluster problem
- Index(es):
Relevant Pages
|
Loading
