Avatar of BakerSyd
BakerSyd
Flag for Australia asked on

add user to printer security

hi

i need to add a security group to our printers and i was wondering if this is possible with either a powershell or vbs script.
to clarify we need to add the group into the security tab of the printer properties...

printer
the security group would have Manage Documents permissions.
need to apply this to over 100 printers.

does anybody know how to do this or code thats can do this?
i have no idea how to code this... very new to all this...

1 print server is 2003 and another print server is 2008 R2



thanks!
PowershellVB Script

Avatar of undefined
Last Comment
BakerSyd

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
Mazdajai

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
BakerSyd

ASKER
awesome, managed to modify the command so that it applies to all printers...

subinacl.exe /printer * /grant="DOMAIN\GROUP=M"

Open in new window



had to run this from the server as i was getting a SeSecurityPrivilege : Access is denied. error when i ran this from my pc.


do you know why that command creates special permissions for the group?
i was thinking it would just tick the Manage Documents option... but it creates special permissions as well..

PRINTER : new ace for DOMAIN\GROUP
PRINTER : new ace for DOMAIN\GROUP
PRINTER : 2 change(s)

Open in new window


Printer Permissions
Mazdajai

Do you mean the creator owner permission?
BakerSyd

ASKER
no no

it creates special permissions for the group that i added in..
its the 2nd entry in my pic thats got the black lines (had to remove server names / groups etc...) you can see a little bit of blue at the end.
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
Mazdajai

I see it now. Honestly I don't recall the exact reason why the extra read permission was added. I started to use subinacl many years ago because of the lack of tools available and  /replace parameter.

icacls, another command line utility, is supported on Windows 7. It has been updating and on par with subinacl, which has not been updated since 2008.

I recommend you take a look of icacls as well, sorry for not being clear on this.
BakerSyd

ASKER
no probs, ill check it out as well and find the best solution for us


thanks for your help