Re: Printing Security
From: Karl Levinson [x y] mvp (jamescagney90210@excite.com)
Date: 01/18/03
- Next message: Karl Levinson [x y] mvp: "Re: And yet another one from the mind of Lohkee!"
- Previous message: Renee Auby: "Printing Security"
- In reply to: Renee Auby: "Printing Security"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Karl Levinson [x y] mvp" <jamescagney90210@excite.com> Date: Sat, 18 Jan 2003 16:53:55 -0500
You could write your own command line or gui script that adds a printer,
maybe even using RUNAS or IIS to run the script, so that the technicians do
not have permission to add printers. You could even add a popup warning
saying that existing printer drivers MUST be used, even though you may have
already prevented them from doing otherwise.
http://securityadmin.info/faq.htm#runas
You could also find out where the printer drivers are being added from [e.g.
either CD, floppy or .CAB files] and remove the permission for the
technicians to access those drives or files. This could cause problems if
they need CD or floppy for other troubleshooting.
And/or, you could also simply add a popup message script [such as NET SEND
localhost "message"] to the startup folder or as a picture on the desktop as
a permanently recurring reminder to all.
If you haven't already, you could check out the Group Policy options in
GPEDIT.MSC, though I'm not sure those are going to help you do what you want
to.
"Renee Auby" <renee.auby@ferguson.com> wrote in message
news:039701c2bf2e$90ece400$89f82ecf@TK2MSFTNGXA01...
> I need to allow our support technicians to create a
> printer on our print server, but keep them from adding new
> drivers to the server and instead only allow them to
> choose "keep existing driver". I have tried to accomplish
> this by putting them in the Power Users Group and then
> setting only Read & Execute file permissions on the print$
> (c:\winnt\system32\spool\drivers).
>
> The first problem I noticed was after beginning the Add
> Printer Wizard and selecting the make and model of the
> printer, the screen to keep existing driver or replace
> driver is skipped. When you click on Finish it
> complains "access is denied".
>
> Our print server hosts almost 700 printers and no matter
> how many times we tell support not to add drivers, they
> get added and eventually blue screen our box. But without
> them having the ability to add a printer it requires us to
> do it instead.
--- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.443 / Virus Database: 248 - Release Date: 1/10/2003
- Next message: Karl Levinson [x y] mvp: "Re: And yet another one from the mind of Lohkee!"
- Previous message: Renee Auby: "Printing Security"
- In reply to: Renee Auby: "Printing Security"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
