Help allowing Print Operators onto a domain controller
Windows Server Forum Index Windows Server
Server discussion on Windows platform.
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web winserverhelp.com
Help allowing Print Operators onto a domain controller

 
Post new topic   Reply to topic    Windows Server Forum Index -> Security
Author Message
bruce
Guest





Posted: Tue Dec 21, 2004 11:48 pm    Post subject: Help allowing Print Operators onto a domain controller Reply with quote

I promoted a win2003 print server to a Domain Controller as part of our
migration from AD 2000.

Prior to the promotion, I had the Print Operators group in the local
Administrators group so our helpdesk could manage the printers.

Now, of course, they have no access to the printers. They cannot be added
to Administrators.

Is there a way that I can give the group access to manage the printers
without having to assign security individually on each printer (there are
70)?

Also, what do I need to do to ensure they can create/share/manage new
printers going forward?

TIA
Back to top
Steven L Umbach
Guest





Posted: Wed Dec 22, 2004 1:38 am    Post subject: Re: Help allowing Print Operators onto a domain controller Reply with quote

Well when you have a domain controller doing double duty there will be
compromises since domain controllers require a domain administrator to do
most major configuration on them. What you should do however is add the
domain users that are in your help desk to the print operators group in
Active Directory Users and Computers. If that does not give them enough
rights see the link below that may help. --- Steve

http://www.windowsnetworking.com/kbase/WindowsTips/WindowsNT/AdminTips/Print/AllowPrintOperatorstoaddaprinter.html


"bruce" <badiii@DELyahoo.com> wrote in message
news:Xns95C6825102444badiiiyahoocom@207.46.248.16...
Quote:
I promoted a win2003 print server to a Domain Controller as part of our
migration from AD 2000.

Prior to the promotion, I had the Print Operators group in the local
Administrators group so our helpdesk could manage the printers.

Now, of course, they have no access to the printers. They cannot be added
to Administrators.

Is there a way that I can give the group access to manage the printers
without having to assign security individually on each printer (there are
70)?

Also, what do I need to do to ensure they can create/share/manage new
printers going forward?

TIA
Back to top
bruce
Guest





Posted: Wed Dec 22, 2004 3:25 am    Post subject: Re: Help allowing Print Operators onto a domain controller Reply with quote

the article was helpful. thank you

"Steven L Umbach" <n9rou@nospam-comcast.net> wrote in
news:OB5HFQ55EHA.2016@TK2MSFTNGP15.phx.gbl:

Quote:
Well when you have a domain controller doing double duty there will be
compromises since domain controllers require a domain administrator to
do most major configuration on them. What you should do however is add
the domain users that are in your help desk to the print operators
group in Active Directory Users and Computers. If that does not give
them enough rights see the link below that may help. --- Steve

http://www.windowsnetworking.com/kbase/WindowsTips/WindowsNT/AdminTips/
Print/AllowPrintOperatorstoaddaprinter.html


"bruce" <badiii@DELyahoo.com> wrote in message
news:Xns95C6825102444badiiiyahoocom@207.46.248.16...
I promoted a win2003 print server to a Domain Controller as part of
our
migration from AD 2000.

Prior to the promotion, I had the Print Operators group in the local
Administrators group so our helpdesk could manage the printers.

Now, of course, they have no access to the printers. They cannot be
added to Administrators.

Is there a way that I can give the group access to manage the
printers without having to assign security individually on each
printer (there are 70)?

Also, what do I need to do to ensure they can create/share/manage new
printers going forward?

TIA

Back to top
 
Post new topic   Reply to topic    Windows Server Forum Index -> Security All times are GMT
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




New Topics Powered by phpBB