Re: Print Operator permissions

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 03/31/05


Date: Thu, 31 Mar 2005 01:57:55 -0700

Services have permissions.
You can adjust these with security configuration settings in
a template or GPO (be sure to leave full permission for System!)
http://support.microsoft.com/kb/256345
http://support.microsoft.com/kb/257247
There also are a couple third-party commandline tools able
to adjust permissions on services.

-- 
Roger Abell
Microsoft MVP (Windows  Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Paul Glickenhaus" <PaulGlickenhaus@discussions.microsoft.com> wrote in
message news:36C30F3C-A8DE-470A-B61A-1D9F21E53348@microsoft.com...
> It is my understanding that the Print Operators are not able to stop\start
> the print spooler service.  Is there away to configure it so that the
users
> assigned to the print operator have the ability to stop\start the print
> spooler service and no other service?
>
> Could this be done via a GPO.
>
> Thank you


Relevant Pages

  • Re: Loopback Processing
    ... As long as loopback is set in one GPO, ... >to be set in any other GPO that falls with the hierarchy? ... >why does it still apply the User Configuration settings. ... >>computer provided it has permissions to the GPO's. ...
    (microsoft.public.windows.group_policy)
  • Re: dns administration delegation
    ... permissions that grant unnecessary rights. ... I wasn't aware of the GPO ... these admins full access to their local dns servers (which are also domain ...
    (microsoft.public.windows.server.dns)
  • Re: dns administration delegation
    ... I'm more concerned about these admins to have the ... early in the deployment of DNS servers and then seldom if every ... permissions that grant unnecessary rights. ... I wasn't aware of the GPO ...
    (microsoft.public.windows.server.dns)
  • Re: Computer componet of GP not being applied
    ... would expect that anything in the Computer Configuration portion of the GPO ... By "non-standard permissions", I mean what are the permissions on the GPO? ... If you look at the properties of the OU in which the Terminal Server resides ... > It all seems to be linked to the local user groups on the terminal server. ...
    (microsoft.public.windows.group_policy)
  • Re: dns administration delegation
    ... I'm more concerned about these admins to have the ... permissions that grant unnecessary rights. ... I wasn't aware of the GPO ... but not access any other dns servers within the ...
    (microsoft.public.windows.server.dns)