List Archives

This forum is an archive of all posts to our mailing list over the past few years. The forum is set read only therefore to contribute you will need to join our list community. See more info about this here.

List Archives

Unanswered Active Topics

Forums Search

Forums >ActiveDir Mail List Archive >List Archives

Subject: RE: [ActiveDir] Granting Full Control to Printers

Prev Next

You are not authorized to post a reply.

Author

Messages

robertsingers User is Offline

Posts:143

04/30/2008 5:53 PM
I've been working on naming standards recently and have been browsing the MSDN Library to narrow down the correct attribute names for various things. In examing the AD printer-queue class I came to the assumption that some of the attributes must be simply inherited from the W32_Printer class. So to throw in another on topic question . . . . . . . . :-) Do I take from the Update Privilage listed in http://msdn.microsoft.com/en-us/library/ms683911(VS.85).aspx that anyone can overwrite the attributes as inherited from the printer object? I ask not because I'm worried about tampering but I need to mandate what and where things are named. ________________________________ From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brian Desmond Sent: Thursday, 1 May 2008 5:33 a.m. To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Granting Full Control to Printers AFAIK the ACL on printQueue objects in AD has nothing to do with control over the actual print queue on the server. You'd need to ACL the printers on the servers accordingly. --brian On Wed, Apr 30, 2008 at 1:01 PM, Mike Tharp <Mike_Tharp@hermanmiller.com> wrote: I have a geographically large infrastructure to manage with multiple locations that have printers. Those locations are split into OUs and the printers are in the OU for that location. The problem I am having is that I granted the IT admins in those sites Full Control for Descendent printer objects in AD so they could clear the print queues and manage the printer however they get an error that says they are not authorized when they try. I don't want to use the Print Operators group for the remote locations because that would give them access to all the printers. Does anyone know if there is another permission I have to assign to give them access to the printers in the OU they manage? -- Thanks, Brian Desmond brian@briandesmond.com c - 312.731.3132 ________________________________ This e-mail message has been scanned for Viruses and cleared by NetIQ MailMarshal ________________________________ ############################################################ PLEASE NOTE: The information contained in this email message and any attached files may be confidential and subject to privilege. Any opinions expressed in this message are not necessarily those of the Department of Building and Housing. All technical opinions are offered on a ?no-liability? basis. This message and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient, you are notified that any use, disclosure or copying of this email is unauthorised. If you have received this email in error, please notify us immediately by reply email and delete the original and any attachment(s). Thank you. ############################################################

You are not authorized to post a reply.

Forums >ActiveDir Mail List Archive >List Archives > RE: [ActiveDir] Granting Full Control to Printers

ActiveForums 3.7

Syndicate

Friends

List Archives

List Archives

Friends

Members

Articles

Related Links

Ads