add permission to printers in Terminal server 2003

[The_SKoL]

Here my problem. I want to add admin permission to some users to
manage printer's queues in terminal server but I don't want to add
Administrator GROUP.

By default, the printer server has administrators group and when a
user connect to terminal server, the printer has administrators +
username permissions.

I want to create a group and manage printers who connects to terminal
server.

I was try to put printer operator in a username but I just can view
printers and not enter in queues and manage it.

thx

 

[Guest]

Do you want them to be able to manage the documents in the print queue or be able to take the printer offline/online. To be able to manage a specific printer's queue you need the permission of "Manage Documents". To be able to take the printer offline you need "Manage Printer"

You can add a group to each printer, without having to elevate their priviliges system-wide

Patrick Rous
Microsoft MVP - Terminal Serve
http://www.workthin.co

----- The_SKoL wrote: ----

Here my problem. I want to add admin permission to some users t
manage printer's queues in terminal server but I don't want to ad
Administrator GROUP

By default, the printer server has administrators group and when
user connect to terminal server, the printer has administrators
username permissions

I want to create a group and manage printers who connects to termina
server

I was try to put printer operator in a username but I just can vie
printers and not enter in queues and manage it

th

 

[The_SKoL]

Do you want them to be able to manage the documents in the print queue or be able to take the printer offline/online. To be able to manage a specific printer's queue you need the permission of "Manage Documents". To be able to take the printer offline you need "Manage Printer".

You can add a group to each printer, without having to elevate their priviliges system-wide.

Patrick Rouse
Microsoft MVP - Terminal Server
http://www.workthin.com

----- The_SKoL wrote: -----

Here my problem. I want to add admin permission to some users to
manage printer's queues in terminal server but I don't want to add
Administrator GROUP.

By default, the printer server has administrators group and when a
user connect to terminal server, the printer has administrators +
username permissions.

I want to create a group and manage printers who connects to terminal
server.

I was try to put printer operator in a username but I just can view
printers and not enter in queues and manage it.

thx

I know but when a user connects to terminal server, the user's printer
is connected also. If I add manually for example a user with manage
documents and manage printer, its workin but when the user
disconnects, the printer disappear also. So when the user reconnects
later to terminal server, my user I had put with manage permissions is
missing.

I don't want to put my 2 techs in administrator group to solve the
problem...

thx

 

[Guest]

http://www.microsoft.com/resources/...se/proddocs/en-us/sag_mps_printers_drivers.as

By default, members of the Administrators, Print Operators, Server Operators, and Power Users groups have Manage Printers permission, which allows them to take ownership of a printer.

So making your technicians Power Users should do the trick

Patrick Rous
Microsoft MVP - Terminal Serve
http://www.workthin.co


----- The_SKoL wrote: ----

Do you want them to be able to manage the documents in the print queue or be able to take the printer offline/online. To be able to manage a specific printer's queue you need the permission of "Manage Documents". To be able to take the printer offline you need "Manage Printer"
Microsoft MVP - Terminal Serve
http://www.workthin.co
manage printer's queues in terminal server but I don't want to ad
Administrator GROUP
user connect to terminal server, the printer has administrators
username permissions
printers and not enter in queues and manage it

I know but when a user connects to terminal server, the user's printe
is connected also. If I add manually for example a user with manag
documents and manage printer, its workin but when the use
disconnects, the printer disappear also. So when the user reconnect
later to terminal server, my user I had put with manage permissions i
missing

I don't want to put my 2 techs in administrator group to solve th
problem..

th

 

[The_SKoL]

http://www.microsoft.com/resources/...e/proddocs/en-us/sag_mps_printers_drivers.asp

By default, members of the Administrators, Print Operators, Server Operators, and Power Users groups have Manage Printers permission, which allows them to take ownership of a printer.

So making your technicians Power Users should do the trick.

Patrick Rouse
Microsoft MVP - Terminal Server
http://www.workthin.com



----- The_SKoL wrote: -----



I know but when a user connects to terminal server, the user's printer
is connected also. If I add manually for example a user with manage
documents and manage printer, its workin but when the user
disconnects, the printer disappear also. So when the user reconnects
later to terminal server, my user I had put with manage permissions is
missing.

I don't want to put my 2 techs in administrator group to solve the
problem...

thx

Ok. I don't have Power users Group on my terminal server 2003. My
terminal server is a DC in my active directory 2003 and I didn't find
this Group in my AD.

 

[The_SKoL]

http://www.microsoft.com/resources/...e/proddocs/en-us/sag_mps_printers_drivers.asp

By default, members of the Administrators, Print Operators, Server Operators, and Power Users groups have Manage Printers permission, which allows them to take ownership of a printer.

So making your technicians Power Users should do the trick.

Patrick Rouse
Microsoft MVP - Terminal Server
http://www.workthin.com



----- The_SKoL wrote: -----



I know but when a user connects to terminal server, the user's printer
is connected also. If I add manually for example a user with manage
documents and manage printer, its workin but when the user
disconnects, the printer disappear also. So when the user reconnects
later to terminal server, my user I had put with manage permissions is
missing.

I don't want to put my 2 techs in administrator group to solve the
problem...

thx

I've created a GPO and linked to an OU with an imported security
template: compatws.inf. I put my user in the OU and it list just my
redirected printers not all printers connected. I add printer
operator group for my user, all printers are listed but again, access
is denied.

 

[Guest]

Does this only happen for auto-created printers, i.e. if you (as an administrator) add a local printer, can they (as Print Operators) manage it

If so, but they can't manage auto-created printers, maybe they need full control of the RDP-Tcp Connection. Just a guess..., but if I'm off base I'm sure Vera or or one of the guys will help out

Patrick Rous
Microsoft MVP - Terminal Serve
http://www.workthin.co

----- The_SKoL wrote: ----

http://www.microsoft.com/resources/...se/proddocs/en-us/sag_mps_printers_drivers.as
Microsoft MVP - Terminal Serve
http://www.workthin.co
is connected also. If I add manually for example a user with manag
documents and manage printer, its workin but when the use
disconnects, the printer disappear also. So when the user reconnect
later to terminal server, my user I had put with manage permissions i
missing

I've created a GPO and linked to an OU with an imported securit
template: compatws.inf. I put my user in the OU and it list just m
redirected printers not all printers connected. I add printe
operator group for my user, all printers are listed but again, acces
is denied