Power Users can printers from all sessions

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: DanGen (DanGen_at_discussions.microsoft.com)
Date: 02/18/05 

Date: Fri, 18 Feb 2005 09:09:03 -0800

We recently deployed Windows 2003 Terminal Services. We are running an app
(Timeslips 2004 from Best Software) that requires us to make users of the
program Power Users. The app works fine, and we've locked down the server
with policies that provide a reasonable level of security for the users.
BUT....

Power Users receive Manage Printer permissions by default, and as result
every power user can see printers from every session. This is a MAJOR
headache. Because of the number of local and network printers at the office
we can wind up with over 120 printers listed (with only 16 users). Other
Apps we are running don't like it (delays while enumerating the printer
list), the users don't like it, and I don't like it. I've noted that the
spooler service is hogging resources as it enumerates all the printers for
users in the respective sessions.

How can I keep my app running AND rid myself of this printing issue.

Is there a way to pull the Manage Printers permission from the local Power
Users group?

Relevant Pages

  • Re: More Thoughts on Green Arrays
    ... I'm sure they did that as a way to parallelize the app. ... to the power consumption, you are missing the single biggest feature ... have 2 ns access to tons of memory, then yes, these chips won't do the job. ...
    (comp.lang.forth)
  • Re: Safely SHUTDOWN Device from Application
    ... for power failure situations where you have some form of backup power like ... How you handle suspend is very much hardware dependent, ... It's then up to the app to take ... applications of mine that might deal with the flash and no other user ...
    (microsoft.public.windowsce.platbuilder)
  • Re: Processor Scalability and Linux
    ... simple chip replacement but I decided to wait for the Bulldozer series. ... more cores added. ... The power to render many minutes of animation and still have functional ... course it depends on the ability of this app to utilize all this ...
    (Fedora)
  • Re: [2003] Why cant app print?
    ... Your application may be looking for the vb5fr.dll under the user's windows directory. ... you can set the compatibility flag for your app so that it will look under the "real" windows folder instead. ... Printers can have their permissions set so that only certain users/groups can print to them, however, there is no application-specific printer permissions. ... SYSTEM32 by our installer. ...
    (microsoft.public.windows.terminal_services)
  • Re: suspend blockers & Android integration
    ... The framework decides when to freeze the app in the first place (as ...     So it knows whether the app is frozen or not. ... But that does not change the fact that you can do finer grained power ... Suspend blocker held by the active background work lets ...
    (Linux-Kernel)