Solved

Terminal Server - Prevent Users from seeing other printers

Posted on 2004-08-24
3
652 Views
Last Modified: 2008-03-06
This is a windows 2003 terminal server running quickbooks enterprise.

A couple of interesting points about quickbooks enterprise and its requirements on terminal server:  

According to their tech support users need to be in at least the Power Users group for the product to work correctly
Printer names can be no longer then 20 charecters for the printing to work from quickbooks

I have users accessing this from both inside and outside.  The inside users have appropriately named printers that quickbooks can print from without an issue.  For the outside users I've set up a script that renames their printer to one that meets the 20 charecter limit.  This has worked for the most part except for a small issue:

It seems that the users can browse everyone elses printers.  I've read an article that suggests power users can do this by default on a TS but I don't know where to modify this.  The question is two fold:

Does the power user group membership give the ability to see other users printers?
How can I modify this permission to assure users only see their own printers?

I'm somewhat TS and 2003 savvy but this one is eluding me hence the 500pts.  I welcome and appreciate all input and comments.
0
Comment
Question by:SamuraiCrow
3 Comments
 
LVL 9

Author Comment

by:SamuraiCrow
ID: 11900233
OK guys, after a day of staring down the barrel of this question I have come upon if not a true solution (being that the true problem is Quickbooks Enterprise REQUIRES users to be members of the Power Users group) at least it's a workaround.  Here's what I did:

Downloaded SubInACL from Microsoft:

http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b&displaylang=en

Copied the EXE to the Terminal Server and set up the following batch file:

cd c:
cd\
cd c:\Kix\SubInACL
subinacl /printer * /revoke="power users"

Finally, I placed this batch file in the startup folder of the existing users and in the all users folder so that it automagically applies to new users logging on to the server for the first time.

In effect this script removes the Power Users from the ACL of any printer generated by clients logging in to the TermServ.  This in turn prevents the printers from being accessable to anyone but the user who generated them and administrators.  

With that I will close the question.  I hope this will save somebody out there some time someday.
0
 

Accepted Solution

by:
modulo earned 0 total points
ID: 12791690
PAQed with points refunded (500)

modulo
Community Support Moderator
0

Featured Post

Free Gift Card with Acronis Backup Purchase!

Backup any data in any location: local and remote systems, physical and virtual servers, private and public clouds, Macs and PCs, tablets and mobile devices, & more! For limited time only, buy any Acronis backup products and get a FREE Amazon/Best Buy gift card worth up to $200!

Join & Write a Comment

Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now