Logo
Windows XP
Windows Vista
Windows 7
Windows Azure
Windows Server
Windows Phone
PREGNANCY
 
 
Windows 7

Understanding the Print Management Console (part 2) - Configuring Default Security for Print Servers

1/6/2012 4:32:34 PM

4. Configuring Default Security for Print Servers

In Windows Server 2008 and earlier versions, the following permissions are assigned by default when a new printer is added to the Print Management console:

  • Administrator has Print, Manage Printers, and Manage Documents permissions.

  • Creator Owner has Manage Documents permission.

  • Everyone has Print permission.

If an administrator wants to modify these permissions for all printers on a print server running on one of these platforms, he needs to open the properties for each printer individually and make the necessary changes on the Security tab of each printer's properties sheet. This can be inconvenient if the administrator needs to modify printer permissions to comply with corporate security policy.

New in Windows Server 2008 R2 is the capability of modifying the default security settings for all printers installed on a print server. This can be configured by using the new Security tab on the properties sheet for a print server (as shown in Figure 2). Any changes made to these default security settings will then be inherited automatically by any new printers added to the print server. Changes to these default security settings do not modify the permissions for any existing printers on the print server.

Figure 2. Configuring default security settings for new printers created on a print server


You can modify a print server's default security settings by using Print Management running on Windows 7 or Windows Server 2008 R2. You can also take or assign ownership of a print server by clicking Advanced and selecting the Owner tab of the Advanced Security Settings dialog box.


Note:

A user must have View Server permission to view printer settings on a print server. A user must have Manage Server permission to add or delete printers, drivers, ports, and forms on printers or to modify settings on a print server.


5. Adding Printers Using the Network Printer Installation Wizard

To add printers using the Network Printer Installation Wizard, follow these steps:

  1. Add at least one print server to the list of managed print servers.

  2. Right-click a print server and select Add Printer to start the Network Printer Installation Wizard.



  3. Do one of the following:

    • To scan the local subnet for TCP/IP or WSD network printers automatically, select Search The Network For Printers and then click Next. As the scan progresses, Windows will display a list of available network printers and will install them automatically on the selected print server. (You might be required to specify a driver for a printer manually if Windows cannot find one automatically.)

    • To add a specific TCP/IP or WSD network printer to the list of printers managed by the print server manually, select Add A TCP/IP Or Web Services Printer By IP Address Or Hostname, specify the name or IP address of the printer, and then click Next.

    • To add a new printer using an existing port, which can be either a local port (LTP or COM) or a previously added TCP/IP port, select Add A New Printer Using An Existing Port, click Next, and either install the printer driver automatically selected by the wizard, select an existing driver, or install a new driver either from the CD media included with the driver or by using Windows Update.

    • To create a new local port and install a printer on it, select Create A New Port And Add A New Printer, click Next, specify a name for the new port, and then either install the printer driver automatically selected by the wizard, select an existing driver, or install a new driver.


Note:

The option for automatically detecting printers on the local subnet using Search The Network For Printers cannot work across a firewall. If you want to use this feature to detect printers for another location, such as a remote subnet at a branch office location that is located behind a firewall, use Remote Desktop to connect to a Windows Server 2003 R2 or later computer at the remote location, start Print Management, and then select Search The Network For Printers as described previously.


In addition to the new Network Printer Installation Wizard, the end-user Add Printer Wizard is still present in Windows 7 and has been enhanced to allow users to add local, network, wireless, and Bluetooth printers and also to search Windows Update for printer drivers when needed.

HOW IT WORKS

WSD Printers

WSD is a new type of network connectivity supported by Windows Vista and later versions. With WSD, users can have a Plug and Play experience similar to that with universal serial bus (USB) devices over the network rather than only with locally connected devices.

In Windows Vista and later versions, WSD printer ports are serviced by the WSD Port Monitor (WSDMon) instead of the Standard Port Monitor (TCPMon) used to service TCP/IP ports. WSDMon is used by default if a printer supports it; otherwise, it defaults to TCPMon.

For more information about the various Web Services specifications and their support on Windows platforms, see http://msdn.microsoft.com/en-us/library/ms951274.aspx on MSDN. You can find additional information on WSD printer support in Windows Vista and later versions on WHDC at http://www.microsoft.com/whdc/device/print/default.mspx.


6. Creating and Using Printer Filters

You can use Print Management to create custom printer filters to simplify the task of managing hundreds of print servers and thousands of printers. To create a custom printer filter, follow these steps:

  1. Right-click the Custom Filters node in Print Management and select Add New Printer Filter.

  2. Type a name and description for the new filter. For example, type All HP Printers for a filter that displays printers whose driver names begin with HP, indicating Hewlett-Packard printers. If desired, select the check box labeled Display The Total Number Of Printers Next To The Name Of The Printer Filter and then click Next.

  3. Specify up to six filter criteria for your new filter. For example, to filter for printers whose driver names begin with HP, select the Driver Name field and the Begins With condition and type HP as the value.



  4. Click Next and configure an e-mail notification or script action that occurs when a printer matches the filter criteria specified by the filter.

  5. Click Finish to create the new filter. Select the new filter to activate it and display printers that meet the criteria specified by the filter.

Table 1 lists the filter criteria fields, conditions, and possible values that you can specify when you create a custom printer filter. Filter criteria fields marked with an asterisk (*) are new to Print Management in Windows 7 and Windows Server 2008 R2.

Table1. Fields, Conditions, and Possible Values for Printer Filter Criteria
FIELDCONDITIONSVALUE
Printer Name

Server Name

Comments

Driver Name

Location

Shared Name

Driver Version*

Provider*
Is exactly, is not exactly, begins with, not begin with, ends with, not end with, contains, not contains(type a value to specify)
Queue StatusIs exactly, is not exactlyReady, paused, error, deleting, paper jam, out of paper, manual feed required, paper problem, offline, IO active, busy, printing, output bin full, not available, waiting, processing, initializing, warming up, toner/ink low, no toner/ink, page punt, user intervention required, out of memory, door open
Jobs in QueueIs exactly, is not exactly, is less than, is less than or equal to, is greater than, is greater than or equal to(type a value to specify)
Is SharedIs exactly, is not exactlyFalse, true


Note:

To modify a printer filter after you create it, right-click the filter and then select Properties.


7. Creating and Using Driver Filters

A new feature of Print Management in Windows 7 and Windows Server 2008 R2 is the ability to create custom driver filters to simplify the task of managing all of your printer drivers on your print servers. To create a custom driver filter, follow these steps:

  1. Right-click the Custom Filters node in Print Management and select Add New Driver Filter.

  2. Type a name and description for the new filter. For example, type Legacy Drivers for a filter that displays printer drivers that don't support driver isolation.

  3. Click Next and specify up to six filter criteria for your new filter. For example, to filter for printer drivers that don't support driver isolation, select the Driver Isolation field and the Is Exactly condition, and type None for the value.

  4. Click Next and continue configuring the filter as described in the previous section.

Table 2 lists the filter criteria fields, conditions, and possible values that you can specify when you create a custom driver filter.

Table 2. Fields, Conditions, and Possible Values for Driver Filter Criteria
FIELDCONDITIONSVALUE
Driver Name

Driver Version

Provider

Environment

Driver File Path

Config File Path

Data File Path

Default Datatype

Hardware ID

Help File Path

Language Monitor

Manufacturer

OEM URL

Inf Path

Print Processor

Driver Data

Type

Driver Isolation

Server Name
Is exactly, is not exactly, begins with, not begin with, ends with, not end with, contains, not contains(type a value to specify)
PackagedIs exactly, is not exactlyFalse, true
Other -----------------
- Managing Printing : How Printing Works in Windows 7
- Taking Advantage of Volume Licensing : KMS and the Client (part 2)
- Taking Advantage of Volume Licensing : KMS and the Client (part 1) - Changing the Client License Type After Installation & Postponing Activation
- Power Searches - AND, OR, and NOT searches, Date and number searches
- Microsoft Access 2010 : Exporting Information (part 2) - Exporting to XML Files
- Microsoft Access 2010 : Exporting Information (part 1)
- Microsoft Project 2010 : Saving a Set of Columns as a Table
- Microsoft Project 2010 : Adding and Removing Columns in a View
- Metadata and Power Searches : Setting Properties When You Save & Personalizing Searches
- Metadata and Power Searches : Working with File Properties
- Tracking Your Licenses with the Key Management Service (part 2) - Configuring DNS to Let KMS Clients Find the KMS Server
- Tracking Your Licenses with the Key Management Service (part 1) - Installing and Initializing KMS
- Taking Advantage of Volume Licensing : Choosing the Right Volume License Key for Windows
- Windows 7 Kernel Mode Drivers Overview and Operations : KMDF I/O Model (part 2)
- Windows 7 Kernel Mode Drivers Overview and Operations : KMDF I/O Model (part 1) - I/O Request Handler
- Windows 7 Kernel Mode Drivers Overview and Operations : KMDF Object Model
- Windows 7 Kernel Mode Drivers Overview and Operations (part 2) - Device Objects and Driver Roles
- Windows 7 Kernel Mode Drivers Overview and Operations (part 1)
- Microsoft Power Point 2010 : Inserting a Diagram & Editing SmartArt Text
- Microsoft Power Point 2010 : Understanding SmartArt Types and Their Uses
 
 
Most view of day
- Developing Disk Images : Configuring the Lab Distribution Share (part 1) - Adding Windows Vista
- Editing Digital Video with Windows Live Movie Maker (part 7) - Editing Your Video - Getting a Bit More Sophisticated
- Microsoft Visio 2010 : Linking External Data to Shapes (part 4) - Using the Database Wizard - Taking the Data-Linked Light Bulb Shape for a Spin
- Working with the Windows Home Server Registry : Finding Registry Entries
- Microsoft Exchange Server 2007 : Hub Transport Server Policy Compliance Features (part 3) - Journaling
- QuarkXPress 8 : Checking spelling (part 1) - Running a spell check, Creating custom spelling dictionaries
- Microsoft Excel 2010 : Protecting and Securing a Workbook - Adding a Digital Signature
- BizTalk 2006 : Getting Started with Pipeline Development (part 1) - Pipeline Stages
- Windows Phone 7 : The Silverlight Controls (part 7) - Layout Controls - Grid Controls
- Windows Server 2008 Server Core : Moving Files and Renaming Files and Directories with the Move Command, Recovering Lost Files with the Recover Utility
Top 10
- Windows Server 2012 : Administering Active Directory using Windows PowerShell (part 3) - Performing an advanced Active Directory administration task
- Windows Server 2012 : Administering Active Directory using Windows PowerShell (part 2) - Finding Active Directory administration cmdlets
- Windows Server 2012 : Administering Active Directory using Windows PowerShell (part 1) - Managing user accounts with Windows PowerShell
- Windows Server 2012 : Enabling advanced features using ADAC (part 3) - Creating fine-grained password policies
- Windows Server 2012 : Enabling advanced features using ADAC (part 2) - Configuring fine-grained password policies
- Windows Server 2012 : Enabling advanced features using ADAC (part 1) - Enabling and using the Active Directory Recycle Bin
- Microsoft Excel 2010 : Protecting and Securing a Workbook - Marking a Workbook as Read-Only
- Microsoft Excel 2010 : Protecting and Securing a Workbook - Working with Office Safe Modes
- Microsoft Excel 2010 : Protecting and Securing a Workbook - Setting External Content Security Options
- Microsoft Excel 2010 : Protecting and Securing a Workbook - Setting Privacy Options - Set Parental Controls for Online Research
 
 
Windows XP
Windows Vista
Windows 7
Windows Azure
Windows Server
Windows Phone
2015 Camaro