I'd like to assign certain AD groups the right manage documents on all
printers. Putting them into "Domain Print Operators do not help. I do not
want to change security on each printer since we have over 300 printers
still groving rapidly. Any hints?

Active Directory 2000 native mode. Servers 2000 and 2003.

Regards,
Jan

I read about setprinter.exe in another post, and that might solve the
problem...if I can figure out how SDDL works. comments on how to assign
rights are appreciated.

"Jan Larsson" <john.doe@noreply.com> wrote in message
news:%23kJXmsS7GHA.200@TK2MSFTNGP05.phx.gbl...
> I'd like to assign certain AD groups the right manage documents on all
> printers. Putting them into "Domain Print Operators do not help. I do not
> want to change security on each printer since we have over 300 printers
> still groving rapidly. Any hints?
>
> Active Directory 2000 native mode. Servers 2000 and 2003.
>
> Regards,
> Jan
>

Hi again, it's me =)

I found it easier than I expected.
Manage the security on one printer on our printserver and then user
setprinter.exe to show teh SDDL

setprinter.exe -show \\server\printer 3

Now cut & paste to set this config to the remaining printers

setprinter.exe \\server 3 <pasted SDDL string>

Thanks,

"Jan Larsson" <john.doe@noreply.com> wrote in message
news:u8KOKbT7GHA.4552@TK2MSFTNGP05.phx.gbl...
>I read about setprinter.exe in another post, and that might solve the
>problem...if I can figure out how SDDL works. comments on how to assign
>rights are appreciated.
>
> "Jan Larsson" <john.doe@noreply.com> wrote in message
> news:%23kJXmsS7GHA.200@TK2MSFTNGP05.phx.gbl...
>> I'd like to assign certain AD groups the right manage documents on all
>> printers. Putting them into "Domain Print Operators do not help. I do not
>> want to change security on each printer since we have over 300 printers
>> still groving rapidly. Any hints?
>>
>> Active Directory 2000 native mode. Servers 2000 and 2003.
>>
>> Regards,
>> Jan
>>
>
>