Auto-created printers default security permissions

I've set up terminal services on a Windows 2003 machine.

When a user logs in, it auto creates their local default printer only and no
additional printer mapping is done. The printer is deleted when they log off
of the termminal server. User operating systems range from Win98 to WinXP.

By default, only the user and the Administrators group have permissions to
that printer object for the duration of the users' session.

I'd like to be able to set the Print Operators group to have full
permissions to any and all TS autocreated printers. Is there a registry key
or a schema edit that controls what permisions are applied to these auto
created local client printers? I don't want to publish them in AD and most
of the clients are machines that are not part of the domain.

Anyone have any thoughts?

Thanks.

RS
.

Relevant Pages

  • File permissons
    ... I need some help with setting the correct permissions on computers in a ... My problem is the if Administrator user logs in and runs an app that creates ... Administrators - Full Control ...
    (microsoft.public.win2000.security)
  • Re: XP Group/File Permissions (Possible BUG found)
    ... When a user logs into a system, they are issued a token which essentially ... > Then assigning Permissions to a directory so that> group "Apps" has full Access, and of course all members> of this group should also have full access. ... > What I mean is, the system will prevent any user in the> new group from accessing the directory with the new group> permissions, until a system reboot. ... > However, I am also aware that some features that seem> like a bug, are really features by design, and although> that may be reasonable in some cases, this certainly can> not be one of those. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Permissions
    ... when a user logs onto ... > screen using a different account (WITH permissions to access) and they tick ... > way to get rid of this is to delete the persons local profile and start again. ... > someone accidently ticks this box without having to delete their local ...
    (microsoft.public.sharepoint.portalserver)
  • Permissions
    ... when a user logs onto ... screen using a different account (WITH permissions to access) and they tick ... way to get rid of this is to delete the persons local profile and start again. ... someone accidently ticks this box without having to delete their local ...
    (microsoft.public.sharepoint.portalserver)
  • RE: Web page not responding
    ... Auto close will do just as you say (close down the db after the ... last user logs out) and it does fit right into the symptoms of the problem. ... Good Luck! ...
    (microsoft.public.dotnet.framework.aspnet)