Home / server / Questions / 306718
In Process
Kieran Walsh
Asked: 2011-09-01 00:25:32 +0800 CST

Delegate delete print queue permissions

  • 772

I want to be able to give a group of people permission to delete all the jobs in a print queue (specifically teachers deleting pupils print jobs)

Up until now we've just made them members of the "print operators" group, but that is not ideal and it causes problems due to the whole AdminSDHolder protected groups issue: http://support.microsoft.com/kb/318180

I've gone to AD and started the delegate control wizard there but can't see a manage documents part - only add/remove printer objects.

Anyone know how to do this? Thanks Kieran.

windows-server-2008 printing active-directory permissions print-server

1 Answers

  1. You need to set "manage documents" permissions on the printers. That can be automated easily with SetACL like this:

    SetACL.exe -on "\\server1\HP LaserJet 4050" -ot prn -actn ace -ace "n:domain1\HelpDesk;p:man_docs"

    Example taken from here.

    • 2