RE: Server 2003 Printer Security Bug

Good Morning,

Yes I created this new goup. I place in it only those I wanted to restrict
printing. I have verfied that no other users or groups are menbers of this
group.

I tried to set permissions directly from the first security screen but it
also failed. I then went to the Advanced screen thinking that I could make it
work from there.

So far nothing seems to be willing to cooperate with me... :(

GWN


"Baboon" wrote:

I have done this many times without trouble.

Almost any time you use deny and it affects more users than expected, it's
because more users belong to the group than you realize. Does this group
contain another group or account, such as domain users, users, authenticated
users, everyone, interactive, etc, that you didn't mean to add? You said
that you built the group, so none of these should be members, but confirm
that. The group needs have as member only the individual users whom you
don't want to print.

Also, you might want to click on the groups that DO have access and make
sure they all have the proper permissions. You said that you went to the
Advanced permissions to set Deny Print. You should be able to do this
without going to Advanced. Why wouldn't you just click the Deny box on Print
in the standard permissions window? Try it again that way to simplify the
process.

Good luck.

"GWN" wrote:

I have a lovely new color printer I am installing on my network. It is built
on my 2003 Domain server and shared. Everyone can print just fine. That is
the problem.
I need to restrict this printer to select people.

Here is what I have tried. I built a Global security group. Added all the
folks I DO NOT want to print to this printer. Added this group to the list
under the Security tab on the printer I built on the server.

I edit the Advanced Properties and select my new group from those listed. I
edit the PRINT permission to show DENY. Once I click Apply, NO ONE in the
company can now print to this printer. Error message is Access Denied. Even
the Domain Admins are denied. Everyone, in the group or not, is Denied access
to print.
I remove the group or edit the permissions again and we are back in business.
I should be able to control print permissions to this printer via group
membership.

What is wrong with the Printer Security in W2003 Server???

Thanks for any info on this issue.
.

Relevant Pages

  • Re: Folder Permissions Question - Server 2003
    ... that deny all users access? ... As for security and how to, using GROUPS and then adding members to the ... lets say you have a network share called ACCOUNTING: ... On the ACCOUNTING SHARE you uncheck Inherit permissions, select COPY, ...
    (microsoft.public.windows.server.general)
  • Re: restrict read access
    ... Check to see if the objects are inheriting the parent ou's security. ... What ou did you deny? ... >>> account) and stores in an interna database. ... >>> we would like to restrict that to an special OU. ...
    (microsoft.public.win2000.active_directory)
  • Re: After changing Share permissions, Even admin is access denied
    ... Look first at the share permissions, as they are the most straightforward. ... This happened after changing permissions to restrict user to only three ... "Jim Behning SBS MVP" wrote: ... Then go back and add users on the security tab. ...
    (microsoft.public.windows.server.sbs)
  • Re: Question about application access
    ... restrict and click Deny next to the Full Control ... security, it might make more sense to run IE in kiosk mode. ... how do I deny access to task manager though? ...
    (microsoft.public.win2000.security)
  • Re: Send As permissions set on all users, need to remove!
    ... I have also installed MS06-029 security fix, twice, and the build still ... As far as where I checked the permissions: AD in the default users OU ... Exchange Server with deny send as permissions, I then added all of the ...
    (microsoft.public.exchange.admin)
Quantcast