• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 7867
  • Last Modified:

Allowing non-Admin User to Clear and Restart Print Spooler on Windows 2003

Hello,

I have a Windows 2003 AD Domain.

The print queue on one of our printers occasionally gets jammed with a print job. When this happens I must not only delete the job, but I need to restart the print spooler service to clear it out. I want to give this ability to the user in the form of a script.

I have tried using:

sc \\printserver stop spooler

from the user's computer, but I get the following error:

[SC] OpenSCManager FAILED 5:

Access is denied.

I have added the user to the "Print Operators" security group, but I am still getting the error message. I do not want to add the user to the Local Admins for the print server.
0
axygen
Asked:
axygen
1 Solution
 
Brian PiercePhotographerCommented:
Assign the user/group the right to "Manage printer" on the printer's security tab.
0
 
axygenAuthor Commented:
I still get Access is denied when using the sc command.
0
 
OlskiCommented:
How about creating a scheduled task to run the script? You can run a scheduled task manually and also set the admin credentials to do it without the user being able to discover the admin credentials.
0
Cloud Class® Course: Microsoft Exchange Server

The MCTS: Microsoft Exchange Server 2010 certification validates your skills in supporting the maintenance and administration of the Exchange servers in an enterprise environment. Learn everything you need to know with this course.

 
axygenAuthor Commented:
@Olski -  How would I go about setting this up? Do I set it up on their computer, or on the printserver?
0
 
Farhan KaziSystems EngineerCommented:
Greetings Axygen,

Why not giving Everyone or Print Operator full access over Print Spooler service...

SubInACL /Service Spooler /Grant=Everyone=F
OR
SubInACL /Service Spooler /Grant=Everyone=TOP

(TOP means they can sTart, stOp and Pause the service)

Get SubInACL from the Win2000
http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b&displaylang=en

More Info:

** Letting a User Start and Stop Services Without Granting the User Administrator Privileges
http://www.windowsitpro.com/articles/print.cfm?articleid=48881

** Another way to grant the right to manage Windows 2000 services
http://www.jsifaq.com/SF/Tips/Tip.aspx?id=3896

** Server Operator Cannot Stop/Start Spooler Service
http://www.pcreview.co.uk/forums/thread-1573336.php
http://www.msfn.org/board/lofiversion/index.php/t54966.html

Hope this helps!
Farhan
0
 
OlskiCommented:
You would need to do it on the user's computer. Put the script file (batch file?) on the user's computer (in a folder called script on C: to make it easy to find).

Go to control panel, Scheduled Taks.
Double click Add Sceduled Task
When it opens click next and then browse and browse to the script file and click open.
Enter a name for the task like restart print spooler and select One Time Only and click next
Click next again and enter the credentials for an admin account that has the rights to perform the spooler restart.
Click next and tick the box for "Open Advanced properties.....
In the advanced properties untick the "Enabled (Scheduled task runs at specified  time)"
Click Ok.

Now in Scheduled tasks right click the restart print spooler task and click run. This will then run the script under the credentials you entered.

Sometimes scheduled tasks can be funny and you have to re-enter the credentials in the Advanced properties, so try this if it doesn't work first time.
0
 
axygenAuthor Commented:
@Olski - thanks, I'll try that after hours.

@farhankazi - thanks for the links, the last one seems to be what I'm looking for. Will try that if @Olski's method doesn't work.
0
 
axygenAuthor Commented:
@Olski - it worked thanks!

In case anyone's wondering here's my batch script...

sc \\printserver stop spooler
ping -n 5 www.google.com
sc \\printserver start spooler

To test it out I actually set used, ping -n 30 www.google.com, and just monitored the print spooler service on printserver. I saw that it turned off and after about 30 pings (however long that takes) it started up again.
0
 
OlskiCommented:
No worries, glad it sorted your problem.
0
 
lukefunoCommented:
how do you know if a schedule task did run successfully or not? is there a log file somewhere? thanks.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: Microsoft Windows 7 Basic

This introductory course to Windows 7 environment will teach you about working with the Windows operating system. You will learn about basic functions including start menu; the desktop; managing files, folders, and libraries.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now