How do give rights to manage Printers on member servers?

I want to give a (global) group of users in Active Directory rights to manage printers on our member print servers and very little else.
I know I can add the global group to the local ""Power users" group but this gives them more access to the server than I ideally want.

Is there a way to manually give "printer manage" rights (maybe via local group policy) to a local group and then nest the global group in it?

Note: Adding the global group to the "Print Operators" group doesn't work as the Print Operators group only applys to DCs
gran3085Asked:
Who is Participating?
 
CasinoguyConnect With a Mentor Commented:
Wow well that is a tuffy. Off the top of my head I'd say add a domain group as power users then useing AD restrict rights like remove controll panel umm prohibit access to properties of Lan Connection and whatever else you dont want them to have access to. I'll see about doing a little experiment later.
0
 
CasinoguyCommented:
Have you tried simply on the print server opening up the printer properties>security and adding the group you want from you domain and click the check box for manage printers? I think group policy is really lacking when it comes to printers would be nice if printers via GP could be set without having to use scripting.
0
 
gran3085Author Commented:
This would allow the users to manage exsiting printers but not add new ones etc....
0
Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

 
gran3085Author Commented:
Specifically I want to know how to manually give a user rights to manage printer by probably editing the registry and maybe file permissions etc.
0
 
CasinoguyCommented:
Ahh so the plot thickens let me get a better understanding of this. You want users to not only be able to manage existing printers and add new ones as well? Are you allowing them access to the print server either physical or remote desktop?
0
 
gran3085Author Commented:
Thats right. They need to add/delete and manage existing printers. They will have the ability to logon locally to the server
0
 
gran3085Author Commented:
Thanks, I think that even if we could figure out how to 'hack' it we won't. This is going to apply to 50 producttion F&P servers so we'll just go with giving the print operators Power user rights.
thanks anyway
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.