Home | Site Map | Cisco How ToNet How To | Wireless |Search | Forums | Services | Donations | Careers | About Us | Contact Us|

Creating a new print group on cluster server

Active Directory, Domain, DNS, WINS, DHCP, SBS, New Releases.

Creating a new print group on cluster server

Postby guest » Sun Nov 16, 2008 5:22 pm

Your descriptor will differ, do not cut and paste this data for your use.
Setup a printer with the security setting you desire.

This example takes the modified security descriptor from a printer shared
from the server, displays current security, then sets the security on a
printer shared from a clustered spooler.

G:\>setprinter -show \\standalonemachine\standalone 3

pSecurityDescriptor="O:BAG:DUD:(A;OIIO;RPWPSDRCWDWO;;;BA)(A;;LCSWSDRCWDWO;;;BA)(A;;SWRC;;;AU)(A;CIIO;RC;;;CO)(A;OIIO;RPWPSD
RCWDWO;;;CO)(A;OIIO;RPWPSDRCWDWO;;;PU)(A;;LCSWSDRCWDWO;;;PU)(A;;SWRC;;;PO)"

current security from cluster shared printer
G:\>setprinter -show \\cluster\sharedfromcluster 3

pSecurityDescriptor="O:BAG:DUD:(A;OIIO;RPWPSDRCWDWO;;;BA)(A;;LCSWSDRCWDWO;;;BA)(A;;SWRC;;;AU)(A;CIIO;RC;;;CO)(A;OIIO;RPWPSD
RCWDWO;;;CO)(A;OIIO;RPWPSDRCWDWO;;;PU)(A;;LCSWSDRCWDWO;;;PU)"


setting the new security descriptor
G:\>setprinter \\cluster\sharedfromcluster 3
pSecurityDescriptor="O:BAG:DUD:(A;OIIO;RPWPSDRCWDWO;;;BA)(A;;LCSWSDRCWDW
O;;;BA)(A;;SWRC;;;AU)(A;CIIO;RC;;;CO)(A;OIIO;RPWPSDRCWDWO;;;CO)(A;OIIO;RPWPSDRCWDWO;;;PU)(A;;LCSWSDRCWDWO;;;PU)(A;;SWRC;;;PO)
"
Set printer on '\\cluster\sharedfromcluster' succeeded.



you can set all the printer on the cluster or remote machine
G:\>setprinter \\cluster 3
pSecurityDescriptor="O:BAG:DUD:(A;OIIO;RPWPSDRCWDWO;;;BA)(A;;LCSWSDRCWDW
O;;;BA)(A;;SWRC;;;AU)(A;CIIO;RC;;;CO)(A;OIIO;RPWPSDRCWDWO;;;CO)(A;OIIO;RPWPSDRCWDWO;;;PU)(A;;LCSWSDRCWDWO;;;PU)(A;;SWRC;;;PO)
"
Printer (1 of 825): \\cluster\Xerox
Set printer on '\\cluster\Xerox' succeeded.

Printer (2 of 825): \\cluster\HP
Set printer on '\\cluster\HP' succeeded.

.................................

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/search/?adv=1

This posting is provided "AS IS" with no warranties, and confers no rights.

"Steven" <Steven@discussions.microsoft.com> wrote in message
news:958DC2C1-0B58-47B2-9AAF-8767E4DF38B1@microsoft.com...
> excellant, I love it, can you give me a better example so I don't mess
> things
> up? One for test and then one for all printer objects on a server. Sorry
> to
> ask but I don't have much time to dedicate to this, wish it was 2008
> server.
> Note: this needs to be done on a cluster as well as a dozen or so
> standalone
> servers.
> --
> Steve
>
>
>
> "Alan Morris [MSFT]" wrote:
>
>> use \\clusteredprintservername rather than "" to perform the operations
>> remotely.
>>
>> Printername == \\cluster\modifiedsecurityprinter
>>
>> --
>> Alan Morris
>> Windows Printing Team
>> Search the Microsoft Knowledge Base here:
>> http://support.microsoft.com/search/?adv=1
>>
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>

>> >I have some good news and bad news
>> >
>> >
>> > first the good news
>> >
>> > setprinter.exe in the Windows resource kit to to set all the printers
>> > on a
>> > machine with specific permissions. Change the settings on one printer,
>> > then view the settings, then change them for all the printers on the
>> > server.
>> >
>> >
>> > setprinter -examples 3
>> >
>> > Used to set print queue security. Note: Security settings can only be
>> > set
>> > as a whole. No
>> > support is provided for partial modifications.
>> >
>> > To see current settings:
>> > SetPrinter -show PrinterName 3
>> >
>> > To change security settings (see "Security Descriptor String Format" in
>> > MSDN or SDKdocs for details):
>> > *** WARNING: this could make the print queue inaccessable and require
>> > the
>> > use of a
>> > registry editor to fix ***
>> > SetPrinter PrinterName 3
>> > "pSecurityDescriptor=O:BAG:DUD:(A;CIIO;RC;;;CO)(A;OIIO;GA;;;CO)(A;;SWRC;;;WD)(A;CIIO;GX;;;WD)(A;;L
>> > CSWSDRCWDWO;;;BA)(A;OICIIO;GA;;;BA)(A;;LCSWSDRCWDWO;;;PU)(A;OICIIO;GA;;;PU)"
>> >
>> > to change this for all printers on the server
>> >
>> > SetPrinter "" 3
>> > "pSecurityDescriptor=YOUR_SECURITY_DESCRIPTOR_FROM_BASE_CONFIG
>> >
>> >
>> >
>> > now the bad news
>> > the setting will need to be updated for each new printer
>> >
>> > but I have some good news
>> > Server 2008 + supports changing the default printer security
>> >
>> >
>> >
>> >
>> > --
>> > Alan Morris
>> > Windows Printing Team
>> > Search the Microsoft Knowledge Base here:
>> > http://support.microsoft.com/search/?adv=1
>> >
>> > This posting is provided "AS IS" with no warranties, and confers no
>> > rights.
>> >
>> >>
>> >> I have an existing print cluster with hundreds of printers on a
>> >> Win2003R2, I
>> >> need to create a new group (or edit Power Users group) and give them
>> >> Manage
>> >> Documents ONLY, the 4 default groups do not give me what I need. How
>> >> can
>> >> I do
>> >> this without touching each and every print object as well as make it
>> >> the
>> >> default for new printer objects?
>> >> --
>> >> Steve
>> >>
>> >>
>> >> --
>> >> Steve
Tablet and Smartphone Setup Guide
http://www.quicksetupguide.com

Troubleshooting Vista Wireless
http://chicagotech.net/
guest
 
Posts: 10191
Joined: Mon Nov 27, 2006 1:10 pm

Return to Windows

Your Ad Here

Who is online

Users browsing this forum: No registered users and 10 guests