allow users to change printer ports

Active directory is not used to manage security on objects such as files, folders or printers.

Thge way to do this is to chnage the security on the printer object (right click and select security), then add the user and grant the "Manage Printers" permission. Normally you woulld put the users into a security group and then grant the permission to the group.

If you want any user to change any printer, then simply grant the Users group (authenticated users or Domain Users) the Manage Printers permission.

OK.  I might of missed the point I would like to script this.  I know how to do it manually but looking to deploy this out to many clients/  To clarify I would like a specific AD security group to have permissions to change their printer ports.  I think subinacl is the tool to script with just not sure of the syntax to use.

The way I understand it, subinacl is a tool to manage security information. It does not relate to ports. See:

http://www.windowsitpro.com/article/permissions/edit-permissions-with-subinacl.aspx

http://analogduck.com/main/subinacl

i have read a few articles on Subinacl and it has a /printer option.  It appears there are articles suggestiong people are doing similar to what I need to do but I cannot find an example of this.  

I am looking for a solutioon to how you would go about getting all members of a specific security group access to change their printer ports weather this is the use of subinacl or other methods.  As long as it is a method that I can script or use in AD im am not bothered.

All ideas welcome.

The second link I gave you gives all the commandline options for subinacl, including /printer. It is used to specify the object to provide information on is a printer.

I have a question though: why would you want some users to change the printer port? That will prevent them from printing. And, if users have "manage printer" permissions, they can change ports anyway.

my users have a printer driver that they use in different branches.  They have multiple tcp/ip ports that pertain to different branches.  They simply need to switch the tcp/ip port to the correct branch.

I have looked at both links and the second link does give detail on this I just need to get a working command line.  I am looking for an easier way to do this as I will have no knowledge of the name of the printer so will have to knock up a script that enumerates the printer list from the print section of the registry that is easy to do and then target each printer with a subinacl command to open the security.  This is doable but the issue with this is If another printer is added further down the line the script will need to be reran.  

I am starting to think it will be easier to make the AD security group concerned part of the local admins or power users group.  Shame windows XP does not have a Print operators group as servers do otherwise I would be on a winner as I could simply give them full control over just printers instead of power user or admin access to the machine.