Here my problem. I want to add admin permission to some users to
manage printer's queues in terminal server but I don't want to add
Administrator GROUP.

By default, the printer server has administrators group and when a
user connect to terminal server, the printer has administrators +
username permissions.

I want to create a group and manage printers who connects to terminal
server.

I was try to put printer operator in a username but I just can view
printers and not enter in queues and manage it.

thx

Do you want them to be able to manage the documents in the print queue or be able to take the printer offline/online. To be able to manage a specific printer's queue you need the permission of "Manage Documents". To be able to take the printer offline you need "Manage Printer"

You can add a group to each printer, without having to elevate their priviliges system-wide

Patrick Rous
Microsoft MVP - Terminal Serve
http://www.workthin.co

----- The_SKoL wrote: ----

Here my problem. I want to add admin permission to some users t
manage printer's queues in terminal server but I don't want to ad
Administrator GROUP

By default, the printer server has administrators group and when
user connect to terminal server, the printer has administrators
username permissions

I want to create a group and manage printers who connects to termina
server

I was try to put printer operator in a username but I just can vie
printers and not enter in queues and manage it

th

"Patrick Rouse [MVP]" <(E-Mail Removed)> wrote in message news:<BBEE0DA2-892E-4024-92BD-(E-Mail Removed)>...
> Do you want them to be able to manage the documents in the print queue or be able to take the printer offline/online. To be able to manage a specific printer's queue you need the permission of "Manage Documents". To be able to take the printer offline you need "Manage Printer".
>
> You can add a group to each printer, without having to elevate their priviliges system-wide.
>
> Patrick Rouse
> Microsoft MVP - Terminal Server
> http://www.workthin.com
>
> ----- The_SKoL wrote: -----
>
> Here my problem. I want to add admin permission to some users to
> manage printer's queues in terminal server but I don't want to add
> Administrator GROUP.
>
> By default, the printer server has administrators group and when a
> user connect to terminal server, the printer has administrators +
> username permissions.
>
> I want to create a group and manage printers who connects to terminal
> server.
>
> I was try to put printer operator in a username but I just can view
> printers and not enter in queues and manage it.
>
> thx

I know but when a user connects to terminal server, the user's printer
is connected also. If I add manually for example a user with manage
documents and manage printer, its workin but when the user
disconnects, the printer disappear also. So when the user reconnects
later to terminal server, my user I had put with manage permissions is
missing.

I don't want to put my 2 techs in administrator group to solve the
problem...

thx

http://www.microsoft.com/resources/d...ers_drivers.as

By default, members of the Administrators, Print Operators, Server Operators, and Power Users groups have Manage Printers permission, which allows them to take ownership of a printer.

So making your technicians Power Users should do the trick

Patrick Rous
Microsoft MVP - Terminal Serve
http://www.workthin.co


----- The_SKoL wrote: ----

"Patrick Rouse [MVP]" <(E-Mail Removed)> wrote in message news:<BBEE0DA2-892E-4024-92BD-(E-Mail Removed)>..
> Do you want them to be able to manage the documents in the print queue or be able to take the printer offline/online. To be able to manage a specific printer's queue you need the permission of "Manage Documents". To be able to take the printer offline you need "Manage Printer"
>> You can add a group to each printer, without having to elevate their priviliges system-wide
>> Patrick Rous
> Microsoft MVP - Terminal Serve
> http://www.workthin.co
>> ----- The_SKoL wrote: ----
>> Here my problem. I want to add admin permission to some users t
> manage printer's queues in terminal server but I don't want to ad
> Administrator GROUP
>> By default, the printer server has administrators group and when
> user connect to terminal server, the printer has administrators
> username permissions
>> I want to create a group and manage printers who connects to termina
> server
>> I was try to put printer operator in a username but I just can vie
> printers and not enter in queues and manage it
>> th

I know but when a user connects to terminal server, the user's printe
is connected also. If I add manually for example a user with manag
documents and manage printer, its workin but when the use
disconnects, the printer disappear also. So when the user reconnect
later to terminal server, my user I had put with manage permissions i
missing

I don't want to put my 2 techs in administrator group to solve th
problem..

th

"Patrick Rouse [MVP]" <(E-Mail Removed)> wrote in message news:<45A0CDFD-DA9E-4A76-A62A-(E-Mail Removed)>...
> http://www.microsoft.com/resources/d...rs_drivers.asp
>
> By default, members of the Administrators, Print Operators, Server Operators, and Power Users groups have Manage Printers permission, which allows them to take ownership of a printer.
>
> So making your technicians Power Users should do the trick.
>
> Patrick Rouse
> Microsoft MVP - Terminal Server
> http://www.workthin.com
>
>
>
> ----- The_SKoL wrote: -----
>
> "Patrick Rouse [MVP]" <(E-Mail Removed)> wrote in message news:<BBEE0DA2-892E-4024-92BD-(E-Mail Removed)>...
> > Do you want them to be able to manage the documents in the print queue or be able to take the printer offline/online. To be able to manage a specific printer's queue you need the permission of "Manage Documents". To be able to take the printer offline you need "Manage Printer".
> >> You can add a group to each printer, without having to elevate their priviliges system-wide.
> >> Patrick Rouse
> > Microsoft MVP - Terminal Server
> > http://www.workthin.com
> >> ----- The_SKoL wrote: -----
> >> Here my problem. I want to add admin permission to some users to
> > manage printer's queues in terminal server but I don't want to add
> > Administrator GROUP.
> >> By default, the printer server has administrators group and when a
> > user connect to terminal server, the printer has administrators +
> > username permissions.
> >> I want to create a group and manage printers who connects to terminal
> > server.
> >> I was try to put printer operator in a username but I just can view
> > printers and not enter in queues and manage it.
> >> thx
>
> I know but when a user connects to terminal server, the user's printer
> is connected also. If I add manually for example a user with manage
> documents and manage printer, its workin but when the user
> disconnects, the printer disappear also. So when the user reconnects
> later to terminal server, my user I had put with manage permissions is
> missing.
>
> I don't want to put my 2 techs in administrator group to solve the
> problem...
>
> thx


Ok. I don't have Power users Group on my terminal server 2003. My
terminal server is a DC in my active directory 2003 and I didn't find
this Group in my AD.

"Patrick Rouse [MVP]" <(E-Mail Removed)> wrote in message news:<45A0CDFD-DA9E-4A76-A62A-(E-Mail Removed)>...
> http://www.microsoft.com/resources/d...rs_drivers.asp
>
> By default, members of the Administrators, Print Operators, Server Operators, and Power Users groups have Manage Printers permission, which allows them to take ownership of a printer.
>
> So making your technicians Power Users should do the trick.
>
> Patrick Rouse
> Microsoft MVP - Terminal Server
> http://www.workthin.com
>
>
>
> ----- The_SKoL wrote: -----
>
> "Patrick Rouse [MVP]" <(E-Mail Removed)> wrote in message news:<BBEE0DA2-892E-4024-92BD-(E-Mail Removed)>...
> > Do you want them to be able to manage the documents in the print queue or be able to take the printer offline/online. To be able to manage a specific printer's queue you need the permission of "Manage Documents". To be able to take the printer offline you need "Manage Printer".
> >> You can add a group to each printer, without having to elevate their priviliges system-wide.
> >> Patrick Rouse
> > Microsoft MVP - Terminal Server
> > http://www.workthin.com
> >> ----- The_SKoL wrote: -----
> >> Here my problem. I want to add admin permission to some users to
> > manage printer's queues in terminal server but I don't want to add
> > Administrator GROUP.
> >> By default, the printer server has administrators group and when a
> > user connect to terminal server, the printer has administrators +
> > username permissions.
> >> I want to create a group and manage printers who connects to terminal
> > server.
> >> I was try to put printer operator in a username but I just can view
> > printers and not enter in queues and manage it.
> >> thx
>
> I know but when a user connects to terminal server, the user's printer
> is connected also. If I add manually for example a user with manage
> documents and manage printer, its workin but when the user
> disconnects, the printer disappear also. So when the user reconnects
> later to terminal server, my user I had put with manage permissions is
> missing.
>
> I don't want to put my 2 techs in administrator group to solve the
> problem...
>
> thx

I've created a GPO and linked to an OU with an imported security
template: compatws.inf. I put my user in the OU and it list just my
redirected printers not all printers connected. I add printer
operator group for my user, all printers are listed but again, access
is denied.

Does this only happen for auto-created printers, i.e. if you (as an administrator) add a local printer, can they (as Print Operators) manage it

If so, but they can't manage auto-created printers, maybe they need full control of the RDP-Tcp Connection. Just a guess..., but if I'm off base I'm sure Vera or or one of the guys will help out

Patrick Rous
Microsoft MVP - Terminal Serve
http://www.workthin.co

----- The_SKoL wrote: ----

"Patrick Rouse [MVP]" <(E-Mail Removed)> wrote in message news:<45A0CDFD-DA9E-4A76-A62A-(E-Mail Removed)>..
> http://www.microsoft.com/resources/d...ers_drivers.as
>> By default, members of the Administrators, Print Operators, Server Operators, and Power Users groups have Manage Printers permission, which allows them to take ownership of a printer.
>> So making your technicians Power Users should do the trick
>> Patrick Rous
> Microsoft MVP - Terminal Serve
> http://www.workthin.co
>>>> ----- The_SKoL wrote: ----
>> "Patrick Rouse [MVP]" <(E-Mail Removed)> wrote in message news:<BBEE0DA2-892E-4024-92BD-(E-Mail Removed)>..
>> Do you want them to be able to manage the documents in the print queue or be able to take the printer offline/online. To be able to manage a specific printer's queue you need the permission of "Manage Documents". To be able to take the printer offline you need "Manage Printer"
>>> You can add a group to each printer, without having to elevate their priviliges system-wide
>>> Patrick Rous
>> Microsoft MVP - Terminal Serve
>> http://www.workthin.co
>>> ----- The_SKoL wrote: ----
>>> Here my problem. I want to add admin permission to some users t
>> manage printer's queues in terminal server but I don't want to ad
>> Administrator GROUP
>>> By default, the printer server has administrators group and when
>> user connect to terminal server, the printer has administrators
>> username permissions
>>> I want to create a group and manage printers who connects to termina
>> server
>>> I was try to put printer operator in a username but I just can vie
>> printers and not enter in queues and manage it
>>> th
>> I know but when a user connects to terminal server, the user's printe
> is connected also. If I add manually for example a user with manag
> documents and manage printer, its workin but when the use
> disconnects, the printer disappear also. So when the user reconnect
> later to terminal server, my user I had put with manage permissions i
> missing
>> I don't want to put my 2 techs in administrator group to solve th
> problem..
>> th

I've created a GPO and linked to an OU with an imported securit
template: compatws.inf. I put my user in the OU and it list just m
redirected printers not all printers connected. I add printe
operator group for my user, all printers are listed but again, acces
is denied