Printer queue permissions

  • Thread starter Thread starter Ray Collins
  • Start date Start date
R

Ray Collins

Hi,

Is it possible to remove the everyone read default permission and replace it
with Authenticated Users read permission on a local print queue?

If it is possible could somebody please give me a hint or two on how to do
it ?

Thanks in advance.
 
You will need the setprinter.exe utility from the Windows resource kit

level 3

set a printer with the security you want. View the security for that
printer, then apply the same security descriptor for a single printer or all
the printers on a system. This will work locally or targeting a remote
machine.

setprinter -examples 3
 
Thank you.

Alan Morris said:
You will need the setprinter.exe utility from the Windows resource kit

level 3

set a printer with the security you want. View the security for that
printer, then apply the same security descriptor for a single printer or
all
the printers on a system. This will work locally or targeting a remote
machine.

setprinter -examples 3

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

Ray Collins said:
Hi,

Is it possible to remove the everyone read default permission and replace it
with Authenticated Users read permission on a local print queue?

If it is possible could somebody please give me a hint or two on how to
do
it ?

Thanks in advance.
Click to expand...
Click to expand...
 
do something like this:
PRINTER_DEFAULTS pd;
pd.DesiredAccess=READ_CONTROL|WRITE_OWNER|WRITE_DAC;
OpenPrinter(
GetPrinter(,3
do something with the returned pSecurityDescriptor in PRINTER_INFO_3
SetPrinter(,3

kj
 
I have created a VBS script to call Windows 2003 Resource Kit setprinter.exe to replace all security settings on all printers on a print server. PC Review forum restrictions prevent me from posting a link, but if you search for "How to replace inheritable server permissions on printers" on social technet microsoft com, you should be able to find it.

http : // social .technet .microsoft .com / Forums / en-US / winserverprint / thread / 91067fd7-d910-4861-ba42-382425af5572
 
Back
Top