gran3085
asked on
How do give rights to manage Printers on member servers?
I want to give a (global) group of users in Active Directory rights to manage printers on our member print servers and very little else.
I know I can add the global group to the local ""Power users" group but this gives them more access to the server than I ideally want.
Is there a way to manually give "printer manage" rights (maybe via local group policy) to a local group and then nest the global group in it?
Note: Adding the global group to the "Print Operators" group doesn't work as the Print Operators group only applys to DCs
I know I can add the global group to the local ""Power users" group but this gives them more access to the server than I ideally want.
Is there a way to manually give "printer manage" rights (maybe via local group policy) to a local group and then nest the global group in it?
Note: Adding the global group to the "Print Operators" group doesn't work as the Print Operators group only applys to DCs
Have you tried simply on the print server opening up the printer properties>security and adding the group you want from you domain and click the check box for manage printers? I think group policy is really lacking when it comes to printers would be nice if printers via GP could be set without having to use scripting.
ASKER
This would allow the users to manage exsiting printers but not add new ones etc....
ASKER
Specifically I want to know how to manually give a user rights to manage printer by probably editing the registry and maybe file permissions etc.
Ahh so the plot thickens let me get a better understanding of this. You want users to not only be able to manage existing printers and add new ones as well? Are you allowing them access to the print server either physical or remote desktop?
ASKER
Thats right. They need to add/delete and manage existing printers. They will have the ability to logon locally to the server
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks, I think that even if we could figure out how to 'hack' it we won't. This is going to apply to 50 producttion F&P servers so we'll just go with giving the print operators Power user rights.
thanks anyway
thanks anyway