Built-in Print Operators Group

L

Larry

This appears only on DC's - Can I use this group to manage print servers on
member servers? - If so, how??
Thanks a million!
 
S

Shilpa Sinha [MSFT]

Hi

Maybe this will help you:

Problem
========
How to create a local user group or permissions needed to emulate the Print
Operators group on Windows 2000 member servers.

First: Windows 2000 DC’s have a built in Local Group titled Print
Operators. Members of this group are allowed to add\create\delete\manage
printers on that specific DC. Print Operators are also able to add printer
drivers.

You can not add users to this local group expecting to manage all printers
on your domain. Since this is a local group you can only manage printers on
the individual server.

If you are running on a member server you must use the Power Users group to
achieve the same results as the Print Operators group on the DC.
It is not possible to create a new group on the Member server and assign
rights equivalent to the Print Operators group. You must use the Power
Users group.

Resolution
==========
Options:

1) DCPromo the member server to a DC then use the built in local group
Print Operators
2) Use the Power Users Group on the Member Server
3) Upgrade to Windows 2003 because Print Operators group is built in to
both DC’s and Member servers.

NOTE: In Windows 2003 the Print Operators Group can only add drivers if you
also add the user to the Power users group and enable the following Local
Machine policy.
"Load and Unload Drivers" under Computer Configuration / Security Settings
/ Local Policies / User Rights Assignment



Shilpa Sinha
This posting is provided "AS IS" with no warranties, and confers no rights.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top