Configurate security permission to all printers in windows 2008

Hi all

we have a windows 2008 64bit (not R2) print server
by default Everyone - allow print
Creator Owner - manage documents
Administrators can do all including manage the printers

Our print server holds 700 printers what is the easy way to assign a local
security group say "helpdesk" to all printers with manage documents right ?

each time we create a printer we want to include that helpdesk security
group by default

Thanks

Powershell?

PS C:\> get-help Set-Acl -examples

NAME
Set-Acl

SYNOPSIS
Changes the security descriptor of a specified resource, such as a file
or a registry key.

-------------------------- EXAMPLE 1 --------------------------

C:\PS>$DogACL = get-acl c:\dog.txt

C:\PS>set-acl -path C:\cat.txt -AclObject $DogACL


Description
-----------
These commands copy the values from the security descriptor of the
Dog.txt file to the security descriptor of the C
at.txt file. When the commands complete, the security descriptors of the
Dog.txt and Cat.txt files are identical.

The first command uses the Get-Acl cmdlet to get the security descriptor
of the Dog.txt file. The assignment operat
or (=) stores the security descriptor in the value of the $DogACL
variable.

The second command uses Set-Acl to change the values in the ACL of
Cat.txt to the values in $DogACL.

The value of the Path parameter is the path to the Cat.txt file. The
value of the AclObject parameter is the model
ACL, in this case, the ACL of Dog.txt as saved in the $DogACL variable.

"mr555" <> wrote in message
news:80A4173D-23BF-49E0-ABD1-...
> Hi all
>
> we have a windows 2008 64bit (not R2) print server
> by default Everyone - allow print
> Creator Owner - manage documents
> Administrators can do all including manage the printers
>
> Our print server holds 700 printers what is the easy way to assign a local
> security group say "helpdesk" to all printers with manage documents right
> ?
>
> each time we create a printer we want to include that helpdesk security
> group by default
>
> Thanks
>
>

Thanks, I have not played with Power Shell much yet.

I guess it would be possible to enumerate all printers and copy the ACL from one
to the rest then. Or even better add in an ACL to the existing ACL's for all
printer thus preserving the special cases (if any)


On Sun, 6 Dec 2009 01:47:59 +0100, "Dusko Savatovic"
<> wrote:

>Powershell?
>
>PS C:\> get-help Set-Acl -examples
>
>NAME
> Set-Acl
>
>SYNOPSIS
> Changes the security descriptor of a specified resource, such as a file
>or a registry key.
>
> -------------------------- EXAMPLE 1 --------------------------
>
> C:\PS>$DogACL = get-acl c:\dog.txt
>
> C:\PS>set-acl -path C:\cat.txt -AclObject $DogACL
>
>
> Description
> -----------
> These commands copy the values from the security descriptor of the
>Dog.txt file to the security descriptor of the C
> at.txt file. When the commands complete, the security descriptors of the
>Dog.txt and Cat.txt files are identical.
>
> The first command uses the Get-Acl cmdlet to get the security descriptor
>of the Dog.txt file. The assignment operat
> or (=) stores the security descriptor in the value of the $DogACL
>variable.
>
> The second command uses Set-Acl to change the values in the ACL of
>Cat.txt to the values in $DogACL.
>
> The value of the Path parameter is the path to the Cat.txt file. The
>value of the AclObject parameter is the model
> ACL, in this case, the ACL of Dog.txt as saved in the $DogACL variable.
>
>"mr555" <> wrote in message
>news:80A4173D-23BF-49E0-ABD1-...
>> Hi all
>>
>> we have a windows 2008 64bit (not R2) print server
>> by default Everyone - allow print
>> Creator Owner - manage documents
>> Administrators can do all including manage the printers
>>
>> Our print server holds 700 printers what is the easy way to assign a local
>> security group say "helpdesk" to all printers with manage documents right
>> ?
>>
>> each time we create a printer we want to include that helpdesk security
>> group by default
>>
>> Thanks
>>
>>
--
Dave Mills
There are 10 types of people, those that understand binary and those that don't.