Adding permissions to allow a security group to use a printer

[Shaneuk20]

Hi

I'm guessing that this is not easy or commonly asked for as I have searched
high and low without success.

If anybody out there wants to prove they are a genius and make my day they
could write a script to add a security group to every printer on a pc.

I have seventy servers with about 2000 printers and I'm looking at manually
adding the user group one at a time. As you can imagine I have RSI just
thinking about it!

I'm guessing you would need to first enumerate all the printers on the
machine, then work out the SID for the user group and then finally marry the
two together without losing the existing permissions.

As I said I've found nothing on the user groups, in the script repository at
MS or in any of my reference books, nor have any of my scripting gurus been
able to help.

Please save my poor sore fingers!!!

Many thanks

Shane

[Jeremy]

subinacl will assign printer permissions from the command prompt. It would
be trivial to write a cmd script to then assign the permissions. Make sure
you download the latest version since the version that comes with the
resource kit is faulty.
http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b&displaylang=en

Sample syntax for subinacl is:

subinacl /printer \\server\shared-printer /display
subinacl /printer \\server\shared-printer /grant=domain\group=P

Post by Shaneuk20
Hi
I'm guessing that this is not easy or commonly asked for as I have
searched high and low without success.
If anybody out there wants to prove they are a genius and make my day they
could write a script to add a security group to every printer on a pc.
I have seventy servers with about 2000 printers and I'm looking at
manually adding the user group one at a time. As you can imagine I have
RSI just thinking about it!
I'm guessing you would need to first enumerate all the printers on the
machine, then work out the SID for the user group and then finally marry
the two together without losing the existing permissions.
As I said I've found nothing on the user groups, in the script repository
at MS or in any of my reference books, nor have any of my scripting gurus
been able to help.
Please save my poor sore fingers!!!
Many thanks
Shane

[Shaneuk20]

It's so simple nobody has needed to send the message.

I am exceptionally thankful for this as it has saved me loads of effort.

I had found setacl.exe which is an open source tool but it will be much
easier to get my manager to accept something from Microsoft.

Many thanks

Shane

Post by Jeremy
subinacl will assign printer permissions from the command prompt. It
would be trivial to write a cmd script to then assign the permissions.
Make sure you download the latest version since the version that comes
with the resource kit is faulty.
http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b&displaylang=en
subinacl /printer \\server\shared-printer /display
subinacl /printer \\server\shared-printer /grant=domain\group=P

Post by Shaneuk20
Hi
I'm guessing that this is not easy or commonly asked for as I have
searched high and low without success.
If anybody out there wants to prove they are a genius and make my day
they could write a script to add a security group to every printer on a
pc.
I have seventy servers with about 2000 printers and I'm looking at
manually adding the user group one at a time. As you can imagine I have
RSI just thinking about it!
I'm guessing you would need to first enumerate all the printers on the
machine, then work out the SID for the user group and then finally marry
the two together without losing the existing permissions.
As I said I've found nothing on the user groups, in the script repository
at MS or in any of my reference books, nor have any of my scripting gurus
been able to help.
Please save my poor sore fingers!!!
Many thanks
Shane