Windows Forum

Ask something
Discussion Locked

Remove Everyone Group on Printers

0 helpful
8 replies

by curious_george

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I'm looking for a command line method or tool that will replace the everyone group on printer share ACLs with the Users group. Or better yet, How do I set the default groups that are assigned to printers when they are created on an NT4 print server?

I have hundreds of existing printers to modify and many more to create and I don't want to use the traditional NT GUI permissions dialoge boxes to accomplish this task.

When I'm done with each printer share, I'd like to have removed 4 of the default permissions and leave only Administrators - Full Control ,Creator Owner - Manage, & Users - Print

Any hot shots out there with solid ideas?

8 replies

by jason.barnett

I've done the exact same thing using Permission Copy (PERMCOPY) from the NT Resource Kit.

The idea is that you get the permissions straight on one share (a printer is a share) and then run:

PERMCOPY \\SourceServer ShareName \\DestinationServerShareName

In practice this would be:

PERMCOPY \\BDC1 Print1 \\BDC1 Print2
PERMCOPY \\BDC1 Print1 \\BDC1 Print3
etc.

It wouldn't take long with a bit of copying and pasting to create a batch file which could rattle through all of your printers with ease.

Hope this helps,

Regards,

JB.

by curious_george

You solution was good, but not ideal because you are restricted to using a model permission set, and it doesn't work in a clustered environment.

I found the perfect solution though, www.pedestalsoftware.com, they modified a couple exe files just for my request, so I could use NT4 or W2k both standard and in a clustered environment.
sharegrant.exe
Check it out if you need to do the same, works like a champ!

I'll give you guys the points for at least trying with intelligent suggestions though - unlike so many other people that don't even read the question before they take a stab at it, and then can't even respond with a minimum of 2nd grade level grammar.

by curious_george

This looks like it only works on file shares, the problem is that printer shares have a different permissioning scheme.
Printer Shares:
No Access, Print, Manage, and Full

vs.
File Shares:
No Access, Read, Change, and Full.

I'll give you guys the points for at least trying with intelligent suggestions though - unlike so many other people that don't even read the question before they take a stab at it, and then can't even respond with a minimum of 2nd grade level grammar.

by estebandelatorre

There's no way on avoiding the default ARGFFF! everyone full control trustee assignment, you we must learn to live with it!.
So the first step in every new share or print, should be remove this group!
According that they are printers, you have some time to do the job, worst if they werw shares!!

This discussion is closed to new replies.