Printer rights

[:Patrick Bonneau]

General configuration :
windows 2000 servers Sp4 (5 with 2 actives directory)

Problems: some user need to have access to specific
printer...but they dont use our domain so we create some
local user on terminal server...after that we put those
users into a group called PrinterManager. I add
printerManager to the security of the printer on the
terminal server. After that I create a shortcut on user
desktop pointing on terminal server\printers(witch is a
target to servername::{2227A280-3AEA-1069-A2DE-
08002B30309D}

the problem is that the user dont see the printers...even
if they are into a group that should be able to see those
printer....If I add the user without the group into the
security of the printer the user see the printer....is it
a bug or is there a way to fix this?

thanks!

 

[Bruce Sanderson]

I'm not sure I understand the situation exactly.

1. Pardon my ignorance, but I have yet to find a way to successfully create
a useable shortcut to the Printers and Faxes folder (on Windows XP), so I'd
be interested in exactly how you do that.

2. If the users are accessing the printer (shared from a server that is a
member of a domain) from their local workstation, try this approach instead:

a. have the user issue the command:
net use \\PrintServerName\IPC$ password /userrintServerUserName
/persistent:yes
b. then the user should be able to add the printers to their workstation
as a Network Printer using the Add Printer Wizard, or "see" them in Windows
Explorer whether or not they actually have permission to use the printer by:
i. click Start, Run, key \\PrintServerName and press Enter,
or
ii. navigate to the Print Server computer via Network Neighborhood

3. Whether you specify the UserName or a group that the user is a member of
should not make any difference to what the user has access to. The only
caveat is that group membership is cached a logon time, so if you change
group membership after the user logs on, they have to logoff and logon again
to make use of the group membership change. Also, you don't mention it, but
if the user account is a local user account, then the group must also be
local (a local user account on computer can not be a member of domain
group).

4. With Windows, in the normal course of events, objects (e.g. printers,
shares) will be visible in Windows Explorer whether or not you actually have
permission to use that object.

 

[Patrick Bonneau]

For the shortcut, simply go into your server \\%
computername% then you will see all shared printer

there will be a folder called printers you can make a
shortcut and paste it into any user computer...the target
will be \\%computername%\::{2227A280-3AEA-1069-A2DE-
08002B30309D}

then you will have to set security on your printer

but I need to hide some printer to users.... So I create
a group localy on the server called PrinterUser and add
the user printer(for our usage we will call it Printer)

I know that there a script making a login localy on the
server with the user Printer

Now if I go into security setting of one printer and I
remove the everyone and insert the group PrinterUser...the
user printer is not able to see the printer but if I
remove the group and just insert the user, the printer
become available...

both user and group are local into the server.

-----Original Message-----
I'm not sure I understand the situation exactly.

1. Pardon my ignorance, but I have yet to find a way to successfully create
a useable shortcut to the Printers and Faxes folder (on Windows XP), so I'd
be interested in exactly how you do that.

2. If the users are accessing the printer (shared from a server that is a
member of a domain) from their local workstation, try this approach instead:

a. have the user issue the command:
net use \\PrintServerName\IPC$

password /userrintServerUserName