Mass updating of printer permissions

I've updated my print servers and management clients so that I can get the Security tab on the Print Management screen.  I was able to easily create a group that had 'Manage Documents' rights on the print servers.  The existing printers did not pick up that new security setting, but new printers do.

I am looking for a way to do a mass update of all the print queues so they get the new permissions.

Servers: 2008 Enterprise 32 bit (Not R2)
Management Clients: Vista/Win7 32 and 64 bit.

August 22nd, 2011 2:09pm

Use setprinter from Server 2003 Windows resource kit.

http://www.tech-archive.net/Archive/Win2000/microsoft.public.win2000.printing/2007-06/msg00001.html

Free Windows Admin Tool Kit Click here and download it now
August 22nd, 2011 6:50pm

I know this is an old thread, but I'm having a hard time finding a way to modify existing permissions for all printers on a 2012r2 print server.  The above solution using setprinter.exe would overwrite existing print permissions, this is not effective as I have several hundred print queues with varying permissions - I simply need to 'add' to the existing printer ACL (need to add print operators having the manage printers permission) without removing the already defined permissions.

Is this possible?

May 19th, 2015 2:48pm

We take old threads here too.  I did respond to the new thread you started and thanks for being a PaperCut customer.  Here is the same response if others find this.

In Windows 8 and Server 2012, the print team added many PowerShell commands. The ones you will need to use are get-printer and set-printer but the methodology is a complete replacement.   I cover this process on the Scripting Guy blog.
http://blogs.technet.com/b/heyscriptingguy/archive/2014/08/10/weekend-scripter-add-security-groups-to-print-servers-by-using-powershell.aspx

On a side note, the "Print Operators" group does not have all the permissions in the local security token as a group you add to the machine. If all the tasks are remote, then use Print Operators.

 This is the output from the get-printer call without Print Operators

Name : FINDME
ComputerName :
Type : Local
ShareName : FINDME
DriverName : PaperCut Global PostScript

Shared : True
Published : False
PermissionSDDL : G:SYD:(A;;LCSWSDRCWDWO;;;S-1-5-21-1132249879-3943415888-2406135570-1001)(A;OIIO;RPWPSDRCWDWO;;;S-1-5-21-1132249879-3943415888-2406135570-1001)(A;OIIO;GA;;;CO)(A;OIIO;GA;;;AC)(A;;SWRC;;;WD)(A;CIIO;GX;;;WD)(A;;SWRC;;;AC)(A;CIIO;GX;;;AC)(A;;LCSWDTSDRCWDWO;;;BA)(A;OICIIO;GA;;;BA)
RenderingMode : CSR

This is the SDDL after adding Print Operators on 2012R2.
PermissionSDDL : G:SYD:(A;;SWRC;;;WD)(A;;SWRC;;;AC)(A;CIIO;RC;;;AC)(A;OIIO;RPWPSDRCWDWO;;;AC)(A;CIIO;RC;;;CO)(A;OIIO;RPWPSDRCWDWO;;;CO)(A;OIIO;RPWPSDRCWDWO;;;S-1-5-21-1132249879-3943415888-2406135570-1001)(A;;LCSWSDRCWDWO;;;S-1-5-21-1132249879-3943415888-2406135570-1001)(A;OIIO;RPWPSDRCWDWO;;;BA)(A;;LCSWSDRCWDWO;;;BA)(A;;SWRC;;;PO)

Free Windows Admin Tool Kit Click here and download it now
May 21st, 2015 12:57am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics