|
server
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
Policy - Restrict printing files from Share driveI want to restrict folks from printing documents from a share drive. Can
this be done with a policy? Nope. The only choices are deny print permissions, or deny read
permissions. You cannot allow read permissions and print permissions and then deny specific prints. -- Paul Williams Microsoft MVP - Windows Server - Directory Services http://www.msresource.net | http://forums.msresource.net If I am understanding you correctly, I would only be able to deny everyone
access to printing, not a particular group. Is that correct? Thanks in advance for the information. Show quoteHide quote "Paul Williams [MVP]" wrote: > Nope. The only choices are deny print permissions, or deny read > permissions. You cannot allow read permissions and print permissions and > then deny specific prints. > > -- > Paul Williams > Microsoft MVP - Windows Server - Directory Services > http://www.msresource.net | http://forums.msresource.net > > > No. You can deny a group or even a user. You simply cannot pick and choose
what prints you deny . -- Paul Williams Microsoft MVP - Windows Server - Directory Services http://www.msresource.net | http://forums.msresource.net What steps would I take to deny a group from printing?
Show quoteHide quote "Paul Williams [MVP]" wrote: > No. You can deny a group or even a user. You simply cannot pick and choose > what prints you deny . > > -- > Paul Williams > Microsoft MVP - Windows Server - Directory Services > http://www.msresource.net | http://forums.msresource.net > > > You would set a deny ACE on the printer in question. Printers are just like
other objects or files. They have a security descriptor and a security tab in the GUI that allows you to modify the security descriptor. In your case, you will want to add an ACE to the DACL. -- Paul Williams Microsoft MVP - Windows Server - Directory Services http://www.msresource.net | http://forums.msresource.net Thanks so much Paul! Have a great day!
Show quoteHide quote "Paul Williams [MVP]" wrote: > You would set a deny ACE on the printer in question. Printers are just like > other objects or files. They have a security descriptor and a security tab > in the GUI that allows you to modify the security descriptor. In your case, > you will want to add an ACE to the DACL. > > -- > Paul Williams > Microsoft MVP - Windows Server - Directory Services > http://www.msresource.net | http://forums.msresource.net > > > |
|||||||||||||||||||||||
Other interesting topics