Power Users can printers from all sessions

From: DanGen (DanGen_at_discussions.microsoft.com)
Date: 02/18/05 

Date: Fri, 18 Feb 2005 09:09:03 -0800

We recently deployed Windows 2003 Terminal Services. We are running an app
(Timeslips 2004 from Best Software) that requires us to make users of the
program Power Users. The app works fine, and we've locked down the server
with policies that provide a reasonable level of security for the users.
BUT....

Power Users receive Manage Printer permissions by default, and as result
every power user can see printers from every session. This is a MAJOR
headache. Because of the number of local and network printers at the office
we can wind up with over 120 printers listed (with only 16 users). Other
Apps we are running don't like it (delays while enumerating the printer
list), the users don't like it, and I don't like it. I've noted that the
spooler service is hogging resources as it enumerates all the printers for
users in the respective sessions.

How can I keep my app running AND rid myself of this printing issue.

Is there a way to pull the Manage Printers permission from the local Power
Users group?

Relevant Pages

  • Re: Safely SHUTDOWN Device from Application
    ... for power failure situations where you have some form of backup power like ... How you handle suspend is very much hardware dependent, ... It's then up to the app to take ... applications of mine that might deal with the flash and no other user ...
    (microsoft.public.windowsce.platbuilder)
  • Re: [2003] Why cant app print?
    ... Your application may be looking for the vb5fr.dll under the user's windows directory. ... you can set the compatibility flag for your app so that it will look under the "real" windows folder instead. ... Printers can have their permissions set so that only certain users/groups can print to them, however, there is no application-specific printer permissions. ... SYSTEM32 by our installer. ...
    (microsoft.public.windows.terminal_services)
  • Re: Migrating app from 3.2v4.2 to OpenServer 5.0.7?
    ... > terminal based application along with some dumb terminals and some ... It also communicates with two serial based printers. ... > The app looks as if it forks, or calls another process that wants to ... > Brian E. Lavender ...
    (comp.unix.sco.misc)
  • Re: Detecting the Pocket PC Power On/Off button
    ... Peter Foot ... > I have now found that the OnActivated event is not called when the power ... I tested that it is called when I switch to another app and switch ... >> Windows Embedded MVP ...
    (microsoft.public.dotnet.framework.compactframework)
  • Re: 60-70 Printers going offline last two nights
    ... our printers are static assigned. ... The offline status doesn't ... seem to follow a consistent pattern in relation to the power down status. ... "Mathieu CHATEAU" wrote: ...
    (microsoft.public.windows.server.general)