Re: Print Groups



excellant, I love it, can you give me a better example so I don't mess things
up? One for test and then one for all printer objects on a server. Sorry to
ask but I don't have much time to dedicate to this, wish it was 2008 server.
Note: this needs to be done on a cluster as well as a dozen or so standalone
servers.
--
Steve



"Alan Morris [MSFT]" wrote:

use \\clusteredprintservername rather than "" to perform the operations
remotely.

Printername == \\cluster\modifiedsecurityprinter

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no rights.

"Alan Morris [MSFT]" <alanmo@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:OfgGLUyIJHA.3708@xxxxxxxxxxxxxxxxxxxxxxx
I have some good news and bad news


first the good news

setprinter.exe in the Windows resource kit to to set all the printers on a
machine with specific permissions. Change the settings on one printer,
then view the settings, then change them for all the printers on the
server.


setprinter -examples 3

Used to set print queue security. Note: Security settings can only be set
as a whole. No
support is provided for partial modifications.

To see current settings:
SetPrinter -show PrinterName 3

To change security settings (see "Security Descriptor String Format" in
MSDN or SDKdocs for details):
*** WARNING: this could make the print queue inaccessable and require the
use of a
registry editor to fix ***
SetPrinter PrinterName 3
"pSecurityDescriptor=O:BAG:DUD:(A;CIIO;RC;;;CO)(A;OIIO;GA;;;CO)(A;;SWRC;;;WD)(A;CIIO;GX;;;WD)(A;;L
CSWSDRCWDWO;;;BA)(A;OICIIO;GA;;;BA)(A;;LCSWSDRCWDWO;;;PU)(A;OICIIO;GA;;;PU)"

to change this for all printers on the server

SetPrinter "" 3
"pSecurityDescriptor=YOUR_SECURITY_DESCRIPTOR_FROM_BASE_CONFIG



now the bad news
the setting will need to be updated for each new printer

but I have some good news
Server 2008 + supports changing the default printer security




--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no
rights.

"Steven" <Steven@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:4F7DEA2E-BB82-4C02-985A-4DD9FF068A31@xxxxxxxxxxxxxxxx
I was told in general questions to post this question here:

I have an existing print cluster with hundreds of printers on a
Win2003R2, I
need to create a new group (or edit Power Users group) and give them
Manage
Documents ONLY, the 4 default groups do not give me what I need. How can
I do
this without touching each and every print object as well as make it the
default for new printer objects?
--
Steve


--
Steve






.



Relevant Pages

  • Re: SceCli Error 1202 filling up the Event Log!
    ... > after restarting the Win2003 server, the secedit.sdb database does not get ... >>> security database and have it recreated. ... >>> configuration\windows settings\security settings, you should inventory ...
    (microsoft.public.win2000.advanced_server)
  • Re: SBS 2003 After Service Pack 1 for SBS
    ... Controllers" groups have been added to the new CERTSVC_DCOM_ACCESS security ... we can have Certificate Services update the DCOM security settings ... down time for the server - probably over a weekend. ... Then please run command "iisreset" to refresh IIS ...
    (microsoft.public.windows.server.sbs)
  • Re: Open file - security warning....How do I disable it?
    ... You possibly should move this over to the IE security newsgroup, ... IE internet options have both all user and per user settings. ... We are in the process of migrating to windows server 2003. ... and then remove security inside the network. ...
    (microsoft.public.security)
  • Re: Access Denied, Cannot connect
    ... server), and I do not understand this part. ... are printing to Windows Server 2003/Print Server and Windows 2000 ... The second link is talking about changing the registry settings and values. ... Controller Security Template". ...
    (microsoft.public.win2000.printing)
  • security-basics Digest of: get.123_145
    ... VPN to ASP a security risk? ... Re: Multiple IPSec tunnels? ... Subject: Security NT Server ... VPN to ASP a security risk? ...
    (Security-Basics)