asked on

Batch modify printer permissions

I'd like to add the "everyone" group to all the printers on a server. There's too many to go through manually adding the permissions - 1,100 printers. Anyone know of a cmd tool or an app that coudl get me round this? Thanks
p.s. it's running Win2K server SP4

sirbounty

Everyone should already be added, no?

There's a command at http://support.microsoft.com/?id=155449 where you can use a batch solution to accomplish this...

darren_hutton

ASKER

Thanks. That looks like it'll do it. I'll give it a go then give you some points :)

We've always taken Everyone off the permissions and managed via group membership. We're now looking at allowing customer controlled allocation to printers for that logon sesison, but it requires a permission increase.

Steve Knight

Hmm,

I had tried doing that myself using a

net share | find "Spooled"

to get the list of printer shares

then (from the commandline)

for /f %a in ('net share ^| find "Spooled"') do rmtshare \\%computername%\%a /GRANT Everyone:F

which appears to work, and the group does show up if you do

rmtshare \\server\printer

but they don't show up in the Security tab of the printer. I assume this is akin to NTFS permissions against Share permissions.

I couldn't find an obvious way then to amend the actual Security permissions.

Steve

sirbounty

Good point Steve - I did find a wmi script that will enumerate the security ACLs..
http://msdn2.microsoft.com/en-us/library/aa394577.aspx

ASKER CERTIFIED SOLUTION

Michael Pfister

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Steve Knight

Never thought to check the all powerful subinacl :-) Nice one.

Steve

darren_hutton

ASKER

Thanks everyone. Think Michael's got it :)