add permission to printers in Terminal server 2003

  • Thread starter Thread starter The_SKoL
  • Start date Start date
T

The_SKoL

Here my problem. I want to add admin permission to some users to
manage printer's queues in terminal server but I don't want to add
Administrator GROUP.

By default, the printer server has administrators group and when a
user connect to terminal server, the printer has administrators +
username permissions.

I want to create a group and manage printers who connects to terminal
server.

I was try to put printer operator in a username but I just can view
printers and not enter in queues and manage it.

thx
 
Do you want them to be able to manage the documents in the print queue or be able to take the printer offline/online. To be able to manage a specific printer's queue you need the permission of "Manage Documents". To be able to take the printer offline you need "Manage Printer"

You can add a group to each printer, without having to elevate their priviliges system-wide

Patrick Rous
Microsoft MVP - Terminal Serve
http://www.workthin.co

----- The_SKoL wrote: ----

Here my problem. I want to add admin permission to some users t
manage printer's queues in terminal server but I don't want to ad
Administrator GROUP

By default, the printer server has administrators group and when
user connect to terminal server, the printer has administrators
username permissions

I want to create a group and manage printers who connects to termina
server

I was try to put printer operator in a username but I just can vie
printers and not enter in queues and manage it

th
 
Patrick Rouse said:
Do you want them to be able to manage the documents in the print queue or be able to take the printer offline/online. To be able to manage a specific printer's queue you need the permission of "Manage Documents". To be able to take the printer offline you need "Manage Printer".

You can add a group to each printer, without having to elevate their priviliges system-wide.

Patrick Rouse
Microsoft MVP - Terminal Server
http://www.workthin.com

----- The_SKoL wrote: -----

Here my problem. I want to add admin permission to some users to
manage printer's queues in terminal server but I don't want to add
Administrator GROUP.

By default, the printer server has administrators group and when a
user connect to terminal server, the printer has administrators +
username permissions.

I want to create a group and manage printers who connects to terminal
server.

I was try to put printer operator in a username but I just can view
printers and not enter in queues and manage it.

thx
Click to expand...

I know but when a user connects to terminal server, the user's printer
is connected also. If I add manually for example a user with manage
documents and manage printer, its workin but when the user
disconnects, the printer disappear also. So when the user reconnects
later to terminal server, my user I had put with manage permissions is
missing.

I don't want to put my 2 techs in administrator group to solve the
problem...

thx
 
http://www.microsoft.com/resources/...se/proddocs/en-us/sag_mps_printers_drivers.as

By default, members of the Administrators, Print Operators, Server Operators, and Power Users groups have Manage Printers permission, which allows them to take ownership of a printer.

So making your technicians Power Users should do the trick

Patrick Rous
Microsoft MVP - Terminal Serve
http://www.workthin.co


----- The_SKoL wrote: ----

Patrick Rouse said:
Do you want them to be able to manage the documents in the print queue or be able to take the printer offline/online. To be able to manage a specific printer's queue you need the permission of "Manage Documents". To be able to take the printer offline you need "Manage Printer"
Microsoft MVP - Terminal Serve
http://www.workthin.co
manage printer's queues in terminal server but I don't want to ad
Administrator GROUP
user connect to terminal server, the printer has administrators
username permissions
printers and not enter in queues and manage it
Click to expand...

I know but when a user connects to terminal server, the user's printe
is connected also. If I add manually for example a user with manag
documents and manage printer, its workin but when the use
disconnects, the printer disappear also. So when the user reconnect
later to terminal server, my user I had put with manage permissions i
missing

I don't want to put my 2 techs in administrator group to solve th
problem..

th
 
Patrick Rouse said:
http://www.microsoft.com/resources/...e/proddocs/en-us/sag_mps_printers_drivers.asp

By default, members of the Administrators, Print Operators, Server Operators, and Power Users groups have Manage Printers permission, which allows them to take ownership of a printer.

So making your technicians Power Users should do the trick.

Patrick Rouse
Microsoft MVP - Terminal Server
http://www.workthin.com



----- The_SKoL wrote: -----



I know but when a user connects to terminal server, the user's printer
is connected also. If I add manually for example a user with manage
documents and manage printer, its workin but when the user
disconnects, the printer disappear also. So when the user reconnects
later to terminal server, my user I had put with manage permissions is
missing.

I don't want to put my 2 techs in administrator group to solve the
problem...

thx
Click to expand...


Ok. I don't have Power users Group on my terminal server 2003. My
terminal server is a DC in my active directory 2003 and I didn't find
this Group in my AD.
 
Patrick Rouse said:
http://www.microsoft.com/resources/...e/proddocs/en-us/sag_mps_printers_drivers.asp

By default, members of the Administrators, Print Operators, Server Operators, and Power Users groups have Manage Printers permission, which allows them to take ownership of a printer.

So making your technicians Power Users should do the trick.

Patrick Rouse
Microsoft MVP - Terminal Server
http://www.workthin.com



----- The_SKoL wrote: -----



I know but when a user connects to terminal server, the user's printer
is connected also. If I add manually for example a user with manage
documents and manage printer, its workin but when the user
disconnects, the printer disappear also. So when the user reconnects
later to terminal server, my user I had put with manage permissions is
missing.

I don't want to put my 2 techs in administrator group to solve the
problem...

thx
Click to expand...

I've created a GPO and linked to an OU with an imported security
template: compatws.inf. I put my user in the OU and it list just my
redirected printers not all printers connected. I add printer
operator group for my user, all printers are listed but again, access
is denied.
 
Does this only happen for auto-created printers, i.e. if you (as an administrator) add a local printer, can they (as Print Operators) manage it

If so, but they can't manage auto-created printers, maybe they need full control of the RDP-Tcp Connection. Just a guess..., but if I'm off base I'm sure Vera or or one of the guys will help out

Patrick Rous
Microsoft MVP - Terminal Serve
http://www.workthin.co

----- The_SKoL wrote: ----

Patrick Rouse said:
http://www.microsoft.com/resources/...se/proddocs/en-us/sag_mps_printers_drivers.as
Microsoft MVP - Terminal Serve
http://www.workthin.co
is connected also. If I add manually for example a user with manag
documents and manage printer, its workin but when the use
disconnects, the printer disappear also. So when the user reconnect
later to terminal server, my user I had put with manage permissions i
missing
Click to expand...

I've created a GPO and linked to an OU with an imported securit
template: compatws.inf. I put my user in the OU and it list just m
redirected printers not all printers connected. I add printe
operator group for my user, all printers are listed but again, acces
is denied
 
Back
Top