I?m looking for the best way to delegate my Help Desk personnel the permission they need to manage all aspects of printing on a server (without adding them to the administrators group).
Background Info —
** The print queues reside on one print server — Windows Server 2003 SP1 (domain member)
What I?ve already tried:
** Adding the ?Help Desk personnel? domain group to the built-in ?Print Operators? group on the print server.
** Granting full rights on all printers to the ?Print Operators? group e.g. ? subinacl /printer * /grant=?print operators?=F
Results ?
** When the user connects to the print server share and runs the ‘Add Printer’ wizard they cannot add a local printer (the option is greyed out), but can add a network connected printer. I’m guessing that they wouldn’t be able to add a port either.
What additional permission(s)do I need to grant to the group in order to allow them to fully administer printing: e.g. add printers, manage printers, manage print jobs, and delete printers.
Thank you for your assistance.
Anth