I have a large dilemma. What I am trying to do is change the permissions on all printers on a print server to all include an AD group and have that group have permissions to manage printers and documents. I am unable to find a way of changing this on multiple printers at a time. And unfortunately I need to change over 1300 printers spanning 15+ servers. Any one know of a way I can do this through a script? I don't need the script to handle multiple servers, I can easily run it on each individual server, but need to be able to add in the individual printer names to the script, or have the script read a text file containing the printer queues. Or if the script can discover all printers on a server - i'm up for anything other than manually editing each printer queue. Thanks
You can accomplish this on a per server basis (or per printer if you need to only set a few on a particular machine). The resource kit has a tool setprinter.exe where you can set all the security descriptors the same for all printers. Basically you need to configure one printer using the UI with the changes, then read the descriptor, then set all the printers the same. config "PrinterName" with UI To see current settings: SetPrinter -show PrinterName 3 To change security settings (see "Security Descriptor String Format" in MSDN or SDKdocs for details) : *** WARNING: this could make the print queue inaccessable and require the use of a registry editor to fix *** SetPrinter PrinterName 3 "pSecurityDescriptor=O:BAG:DUD:(A;CIIO;RC;;;CO)(A;OIIO;GA;;;CO)(A;;SWRC;;;WD )(A;CIIO;GX;;;WD)(A;;LCSWSDRCWDWO;;;BA)(A;OICIIO;GA;;;BA)(A;;LCSWSDRCWDWO;;; PU)(A;OICIIO;GA;;;PU)" To leave the settings unchanged (but what's the point then): SetPrinter PrinterName 3 "pSecurityDescriptor=NULL" to apply the new security to all the printers on a server SetPrinter \\Printserver 3 "pSecurityDescriptor=O:BAG:DUD:(A;CIIO;RC;;;CO)(A;OIIO;GA;;;CO)(A;;SWRC;;;WD )(A;CIIO;GX;;;WD)(A;;LCSWSDRCWDWO;;;BA)(A;OICIIO;GA;;;BA)(A;;LCSWSDRCWDWO;;; PU)(A;OICIIO;GA;;;PU)" here's the resource kit. http://www.microsoft.com/downloads/details.aspx?FamilyID=9d467a69-57ff-4ae7-96ee-b18c4790cffd&DisplayLang=en -- -- Alan Morris Windows Printing Team Search the Microsoft Knowledge Base here: http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto This posting is provided "AS IS" with no warranties, and confers no rights. "Nevin Booth" wrote in message news:3B64055A-3B9F-4B05-A54F-B7A504565C20@microsoft.com... >I have a large dilemma. What I am trying to do is change the permissions on > all printers on a print server to all include an AD group and have that > group > have permissions to manage printers and documents. I am unable to find a > way > of changing this on multiple printers at a time. And unfortunately I need > to > change over 1300 printers spanning 15+ servers. > > Any one know of a way I can do this through a script? I don't need the > script to handle multiple servers, I can easily run it on each individual > server, but need to be able to add in the individual printer names to the > script, or have the script read a text file containing the printer queues. > Or > if the script can discover all printers on a server - i'm up for anything > other than manually editing each printer queue. > > Thanks
