Logo
PREGNANCY
Windows XP
Windows Vista
Windows 7
Windows Azure
Windows Server
Windows Phone
 
 
Windows 7

Understanding the Print Management Console (part 2) - Configuring Default Security for Print Servers

1/6/2012 4:32:34 PM

4. Configuring Default Security for Print Servers

In Windows Server 2008 and earlier versions, the following permissions are assigned by default when a new printer is added to the Print Management console:

  • Administrator has Print, Manage Printers, and Manage Documents permissions.

  • Creator Owner has Manage Documents permission.

  • Everyone has Print permission.

If an administrator wants to modify these permissions for all printers on a print server running on one of these platforms, he needs to open the properties for each printer individually and make the necessary changes on the Security tab of each printer's properties sheet. This can be inconvenient if the administrator needs to modify printer permissions to comply with corporate security policy.

New in Windows Server 2008 R2 is the capability of modifying the default security settings for all printers installed on a print server. This can be configured by using the new Security tab on the properties sheet for a print server (as shown in Figure 2). Any changes made to these default security settings will then be inherited automatically by any new printers added to the print server. Changes to these default security settings do not modify the permissions for any existing printers on the print server.

Figure 2. Configuring default security settings for new printers created on a print server


You can modify a print server's default security settings by using Print Management running on Windows 7 or Windows Server 2008 R2. You can also take or assign ownership of a print server by clicking Advanced and selecting the Owner tab of the Advanced Security Settings dialog box.


Note:

A user must have View Server permission to view printer settings on a print server. A user must have Manage Server permission to add or delete printers, drivers, ports, and forms on printers or to modify settings on a print server.


5. Adding Printers Using the Network Printer Installation Wizard

To add printers using the Network Printer Installation Wizard, follow these steps:

  1. Add at least one print server to the list of managed print servers.

  2. Right-click a print server and select Add Printer to start the Network Printer Installation Wizard.



  3. Do one of the following:

    • To scan the local subnet for TCP/IP or WSD network printers automatically, select Search The Network For Printers and then click Next. As the scan progresses, Windows will display a list of available network printers and will install them automatically on the selected print server. (You might be required to specify a driver for a printer manually if Windows cannot find one automatically.)

    • To add a specific TCP/IP or WSD network printer to the list of printers managed by the print server manually, select Add A TCP/IP Or Web Services Printer By IP Address Or Hostname, specify the name or IP address of the printer, and then click Next.

    • To add a new printer using an existing port, which can be either a local port (LTP or COM) or a previously added TCP/IP port, select Add A New Printer Using An Existing Port, click Next, and either install the printer driver automatically selected by the wizard, select an existing driver, or install a new driver either from the CD media included with the driver or by using Windows Update.

    • To create a new local port and install a printer on it, select Create A New Port And Add A New Printer, click Next, specify a name for the new port, and then either install the printer driver automatically selected by the wizard, select an existing driver, or install a new driver.


Note:

The option for automatically detecting printers on the local subnet using Search The Network For Printers cannot work across a firewall. If you want to use this feature to detect printers for another location, such as a remote subnet at a branch office location that is located behind a firewall, use Remote Desktop to connect to a Windows Server 2003 R2 or later computer at the remote location, start Print Management, and then select Search The Network For Printers as described previously.


In addition to the new Network Printer Installation Wizard, the end-user Add Printer Wizard is still present in Windows 7 and has been enhanced to allow users to add local, network, wireless, and Bluetooth printers and also to search Windows Update for printer drivers when needed.

HOW IT WORKS

WSD Printers

WSD is a new type of network connectivity supported by Windows Vista and later versions. With WSD, users can have a Plug and Play experience similar to that with universal serial bus (USB) devices over the network rather than only with locally connected devices.

In Windows Vista and later versions, WSD printer ports are serviced by the WSD Port Monitor (WSDMon) instead of the Standard Port Monitor (TCPMon) used to service TCP/IP ports. WSDMon is used by default if a printer supports it; otherwise, it defaults to TCPMon.

For more information about the various Web Services specifications and their support on Windows platforms, see http://msdn.microsoft.com/en-us/library/ms951274.aspx on MSDN. You can find additional information on WSD printer support in Windows Vista and later versions on WHDC at http://www.microsoft.com/whdc/device/print/default.mspx.


6. Creating and Using Printer Filters

You can use Print Management to create custom printer filters to simplify the task of managing hundreds of print servers and thousands of printers. To create a custom printer filter, follow these steps:

  1. Right-click the Custom Filters node in Print Management and select Add New Printer Filter.

  2. Type a name and description for the new filter. For example, type All HP Printers for a filter that displays printers whose driver names begin with HP, indicating Hewlett-Packard printers. If desired, select the check box labeled Display The Total Number Of Printers Next To The Name Of The Printer Filter and then click Next.

  3. Specify up to six filter criteria for your new filter. For example, to filter for printers whose driver names begin with HP, select the Driver Name field and the Begins With condition and type HP as the value.



  4. Click Next and configure an e-mail notification or script action that occurs when a printer matches the filter criteria specified by the filter.

  5. Click Finish to create the new filter. Select the new filter to activate it and display printers that meet the criteria specified by the filter.

Table 1 lists the filter criteria fields, conditions, and possible values that you can specify when you create a custom printer filter. Filter criteria fields marked with an asterisk (*) are new to Print Management in Windows 7 and Windows Server 2008 R2.

Table1. Fields, Conditions, and Possible Values for Printer Filter Criteria
FIELDCONDITIONSVALUE
Printer Name

Server Name

Comments

Driver Name

Location

Shared Name

Driver Version*

Provider*
Is exactly, is not exactly, begins with, not begin with, ends with, not end with, contains, not contains(type a value to specify)
Queue StatusIs exactly, is not exactlyReady, paused, error, deleting, paper jam, out of paper, manual feed required, paper problem, offline, IO active, busy, printing, output bin full, not available, waiting, processing, initializing, warming up, toner/ink low, no toner/ink, page punt, user intervention required, out of memory, door open
Jobs in QueueIs exactly, is not exactly, is less than, is less than or equal to, is greater than, is greater than or equal to(type a value to specify)
Is SharedIs exactly, is not exactlyFalse, true


Note:

To modify a printer filter after you create it, right-click the filter and then select Properties.


7. Creating and Using Driver Filters

A new feature of Print Management in Windows 7 and Windows Server 2008 R2 is the ability to create custom driver filters to simplify the task of managing all of your printer drivers on your print servers. To create a custom driver filter, follow these steps:

  1. Right-click the Custom Filters node in Print Management and select Add New Driver Filter.

  2. Type a name and description for the new filter. For example, type Legacy Drivers for a filter that displays printer drivers that don't support driver isolation.

  3. Click Next and specify up to six filter criteria for your new filter. For example, to filter for printer drivers that don't support driver isolation, select the Driver Isolation field and the Is Exactly condition, and type None for the value.

  4. Click Next and continue configuring the filter as described in the previous section.

Table 2 lists the filter criteria fields, conditions, and possible values that you can specify when you create a custom driver filter.

Table 2. Fields, Conditions, and Possible Values for Driver Filter Criteria
FIELDCONDITIONSVALUE
Driver Name

Driver Version

Provider

Environment

Driver File Path

Config File Path

Data File Path

Default Datatype

Hardware ID

Help File Path

Language Monitor

Manufacturer

OEM URL

Inf Path

Print Processor

Driver Data

Type

Driver Isolation

Server Name
Is exactly, is not exactly, begins with, not begin with, ends with, not end with, contains, not contains(type a value to specify)
PackagedIs exactly, is not exactlyFalse, true
Other -----------------
- Managing Printing : How Printing Works in Windows 7
- Taking Advantage of Volume Licensing : KMS and the Client (part 2)
- Taking Advantage of Volume Licensing : KMS and the Client (part 1) - Changing the Client License Type After Installation & Postponing Activation
- Power Searches - AND, OR, and NOT searches, Date and number searches
- Microsoft Access 2010 : Exporting Information (part 2) - Exporting to XML Files
- Microsoft Access 2010 : Exporting Information (part 1)
- Microsoft Project 2010 : Saving a Set of Columns as a Table
- Microsoft Project 2010 : Adding and Removing Columns in a View
- Metadata and Power Searches : Setting Properties When You Save & Personalizing Searches
- Metadata and Power Searches : Working with File Properties
- Tracking Your Licenses with the Key Management Service (part 2) - Configuring DNS to Let KMS Clients Find the KMS Server
- Tracking Your Licenses with the Key Management Service (part 1) - Installing and Initializing KMS
- Taking Advantage of Volume Licensing : Choosing the Right Volume License Key for Windows
- Windows 7 Kernel Mode Drivers Overview and Operations : KMDF I/O Model (part 2)
- Windows 7 Kernel Mode Drivers Overview and Operations : KMDF I/O Model (part 1) - I/O Request Handler
- Windows 7 Kernel Mode Drivers Overview and Operations : KMDF Object Model
- Windows 7 Kernel Mode Drivers Overview and Operations (part 2) - Device Objects and Driver Roles
- Windows 7 Kernel Mode Drivers Overview and Operations (part 1)
- Microsoft Power Point 2010 : Inserting a Diagram & Editing SmartArt Text
- Microsoft Power Point 2010 : Understanding SmartArt Types and Their Uses
 
 
Most view of day
- Mix and Match with Old Windows and Macs : Installing Optional Network Components
- Microsoft Visio 2010 : Importing Graphics (part 6) - Importing AutoCAD Drawings - Manipulating an Imported AutoCAD Drawing and Adding Furniture
- Microsoft SharePoint 2013 : Looking at Visio Services (part 4) - Visio Services security considerations,Supported data scenarios
- Managing Windows 7 : Troubleshooting Problems - Find a Troubleshooter, Run a Troubleshooter
- Managing Windows 7 : Changing Indexing Options, Managing Your Credentials
- Windows Phone 8 : Messaging - Composing a New Message (part 4) - Removing a Message Attachment
- Windows Server 2012 Administration : Windows Server 2012 Active Directory Groups
- Windows Server 2012 : Configuring IPsec (part 1) - Understanding connection security
- Windows Server 2012 Group Policies and Policy Management : Understanding Group Policy (part 3) - GPO Filtering, Group Policy Loopback Processing
- Windows Server 2012 Administration : Managing Printers with the Print Management Console (part 2) - Adding New Printers as Network Shared Resources
Top 10
- Windows Server 2012 : Configuring IPsec (part 7) - Configuring connection security rules - Monitoring IPsec
- Windows Server 2012 : Configuring IPsec (part 6) - Configuring connection security rules - Creating a custom rule, Configuring authenticated bypass
- Windows Server 2012 : Configuring IPsec (part 5) - Configuring connection security rules - Creating an authentication exemption rule, Creating a server-to-server rule, Creating a tunnel rule
- Windows Server 2012 : Configuring IPsec (part 4) - Configuring connection security rules - Types of connection security rules, Creating an isolation rule
- Windows Server 2012 : Configuring IPsec (part 3) - Configuring IPsec settings - Customizing IPsec tunnel authorizations, Configuring IPsec settings using Windows PowerShell
- Windows Server 2012 : Configuring IPsec (part 2) - Configuring IPsec settings - Customizing IPsec defaults
- Windows Server 2012 : Configuring IPsec (part 1) - Understanding connection security
- Microsoft Project 2010 : Linking Tasks (part 8) - Auditing Task Links,Using the Task Inspector
- Microsoft Project 2010 : Linking Tasks (part 7) - Creating Links by Using the Mouse,Working with Automatic Linking Options
- Microsoft Project 2010 : Linking Tasks (part 6) - Creating Links by Using the Entry Table
 
 
Windows XP
Windows Vista
Windows 7
Windows Azure
Windows Server
Windows Phone
2015 Camaro