Adding a Global group to dozens of printers on W2K Cluster

[MongJP]

I need to add a global group to about 200 hundred printers in a
cluster, I haven't found an easy or automated way to do this, is there
one. Group would have same rights on all printer as administrators,
but can not be added to local admin group. Any ideas would be great
thanks!

 

[Alan Morris\(MSFT\)]

The resource kit has a tool setprinter.exe where you can set all the
security descriptors the same for all printers. Basically you need to
configure one printer with the UI with the changes, then read the
descriptor, then set all the printers the same.

config "PrinterName" with UI
To see current settings:
SetPrinter -show PrinterName 3

To change security settings (see "Security Descriptor String Format" in MSDN
or SDKdocs for details)
:
*** WARNING: this could make the print queue inaccessable and require the
use of a registry editor to fix ***
SetPrinter PrinterName 3
"pSecurityDescriptor=O:BAGUDA;CIIO;RC;;;CO)(A;OIIO;GA;;;CO)(A;;SWRC;;;WD
)(A;CIIO;GX;;;WD)(A;;LCSWSDRCWDWO;;;BA)(A;OICIIO;GA;;;BA)(A;;LCSWSDRCWDWO;;;
PU)(A;OICIIO;GA;;;PU)"

To leave the settings unchanged (but what's the point then):
SetPrinter PrinterName 3 "pSecurityDescriptor=NULL"

here's the resource kit.
http://www.microsoft.com/downloads/...69-57ff-4ae7-96ee-b18c4790cffd&DisplayLang=en

--
Alan Morris
Microsoft Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.