Logo
PREGNANCY
Windows XP
Windows Vista
Windows 7
Windows Azure
Windows Server
Windows Phone
 
 
Windows 7

Understanding the Print Management Console (part 2) - Configuring Default Security for Print Servers

1/6/2012 4:32:34 PM

4. Configuring Default Security for Print Servers

In Windows Server 2008 and earlier versions, the following permissions are assigned by default when a new printer is added to the Print Management console:

  • Administrator has Print, Manage Printers, and Manage Documents permissions.

  • Creator Owner has Manage Documents permission.

  • Everyone has Print permission.

If an administrator wants to modify these permissions for all printers on a print server running on one of these platforms, he needs to open the properties for each printer individually and make the necessary changes on the Security tab of each printer's properties sheet. This can be inconvenient if the administrator needs to modify printer permissions to comply with corporate security policy.

New in Windows Server 2008 R2 is the capability of modifying the default security settings for all printers installed on a print server. This can be configured by using the new Security tab on the properties sheet for a print server (as shown in Figure 2). Any changes made to these default security settings will then be inherited automatically by any new printers added to the print server. Changes to these default security settings do not modify the permissions for any existing printers on the print server.

Figure 2. Configuring default security settings for new printers created on a print server


You can modify a print server's default security settings by using Print Management running on Windows 7 or Windows Server 2008 R2. You can also take or assign ownership of a print server by clicking Advanced and selecting the Owner tab of the Advanced Security Settings dialog box.


Note:

A user must have View Server permission to view printer settings on a print server. A user must have Manage Server permission to add or delete printers, drivers, ports, and forms on printers or to modify settings on a print server.


5. Adding Printers Using the Network Printer Installation Wizard

To add printers using the Network Printer Installation Wizard, follow these steps:

  1. Add at least one print server to the list of managed print servers.

  2. Right-click a print server and select Add Printer to start the Network Printer Installation Wizard.



  3. Do one of the following:

    • To scan the local subnet for TCP/IP or WSD network printers automatically, select Search The Network For Printers and then click Next. As the scan progresses, Windows will display a list of available network printers and will install them automatically on the selected print server. (You might be required to specify a driver for a printer manually if Windows cannot find one automatically.)

    • To add a specific TCP/IP or WSD network printer to the list of printers managed by the print server manually, select Add A TCP/IP Or Web Services Printer By IP Address Or Hostname, specify the name or IP address of the printer, and then click Next.

    • To add a new printer using an existing port, which can be either a local port (LTP or COM) or a previously added TCP/IP port, select Add A New Printer Using An Existing Port, click Next, and either install the printer driver automatically selected by the wizard, select an existing driver, or install a new driver either from the CD media included with the driver or by using Windows Update.

    • To create a new local port and install a printer on it, select Create A New Port And Add A New Printer, click Next, specify a name for the new port, and then either install the printer driver automatically selected by the wizard, select an existing driver, or install a new driver.


Note:

The option for automatically detecting printers on the local subnet using Search The Network For Printers cannot work across a firewall. If you want to use this feature to detect printers for another location, such as a remote subnet at a branch office location that is located behind a firewall, use Remote Desktop to connect to a Windows Server 2003 R2 or later computer at the remote location, start Print Management, and then select Search The Network For Printers as described previously.


In addition to the new Network Printer Installation Wizard, the end-user Add Printer Wizard is still present in Windows 7 and has been enhanced to allow users to add local, network, wireless, and Bluetooth printers and also to search Windows Update for printer drivers when needed.

HOW IT WORKS

WSD Printers

WSD is a new type of network connectivity supported by Windows Vista and later versions. With WSD, users can have a Plug and Play experience similar to that with universal serial bus (USB) devices over the network rather than only with locally connected devices.

In Windows Vista and later versions, WSD printer ports are serviced by the WSD Port Monitor (WSDMon) instead of the Standard Port Monitor (TCPMon) used to service TCP/IP ports. WSDMon is used by default if a printer supports it; otherwise, it defaults to TCPMon.

For more information about the various Web Services specifications and their support on Windows platforms, see http://msdn.microsoft.com/en-us/library/ms951274.aspx on MSDN. You can find additional information on WSD printer support in Windows Vista and later versions on WHDC at http://www.microsoft.com/whdc/device/print/default.mspx.


6. Creating and Using Printer Filters

You can use Print Management to create custom printer filters to simplify the task of managing hundreds of print servers and thousands of printers. To create a custom printer filter, follow these steps:

  1. Right-click the Custom Filters node in Print Management and select Add New Printer Filter.

  2. Type a name and description for the new filter. For example, type All HP Printers for a filter that displays printers whose driver names begin with HP, indicating Hewlett-Packard printers. If desired, select the check box labeled Display The Total Number Of Printers Next To The Name Of The Printer Filter and then click Next.

  3. Specify up to six filter criteria for your new filter. For example, to filter for printers whose driver names begin with HP, select the Driver Name field and the Begins With condition and type HP as the value.



  4. Click Next and configure an e-mail notification or script action that occurs when a printer matches the filter criteria specified by the filter.

  5. Click Finish to create the new filter. Select the new filter to activate it and display printers that meet the criteria specified by the filter.

Table 1 lists the filter criteria fields, conditions, and possible values that you can specify when you create a custom printer filter. Filter criteria fields marked with an asterisk (*) are new to Print Management in Windows 7 and Windows Server 2008 R2.

Table1. Fields, Conditions, and Possible Values for Printer Filter Criteria
FIELDCONDITIONSVALUE
Printer Name

Server Name

Comments

Driver Name

Location

Shared Name

Driver Version*

Provider*
Is exactly, is not exactly, begins with, not begin with, ends with, not end with, contains, not contains(type a value to specify)
Queue StatusIs exactly, is not exactlyReady, paused, error, deleting, paper jam, out of paper, manual feed required, paper problem, offline, IO active, busy, printing, output bin full, not available, waiting, processing, initializing, warming up, toner/ink low, no toner/ink, page punt, user intervention required, out of memory, door open
Jobs in QueueIs exactly, is not exactly, is less than, is less than or equal to, is greater than, is greater than or equal to(type a value to specify)
Is SharedIs exactly, is not exactlyFalse, true


Note:

To modify a printer filter after you create it, right-click the filter and then select Properties.


7. Creating and Using Driver Filters

A new feature of Print Management in Windows 7 and Windows Server 2008 R2 is the ability to create custom driver filters to simplify the task of managing all of your printer drivers on your print servers. To create a custom driver filter, follow these steps:

  1. Right-click the Custom Filters node in Print Management and select Add New Driver Filter.

  2. Type a name and description for the new filter. For example, type Legacy Drivers for a filter that displays printer drivers that don't support driver isolation.

  3. Click Next and specify up to six filter criteria for your new filter. For example, to filter for printer drivers that don't support driver isolation, select the Driver Isolation field and the Is Exactly condition, and type None for the value.

  4. Click Next and continue configuring the filter as described in the previous section.

Table 2 lists the filter criteria fields, conditions, and possible values that you can specify when you create a custom driver filter.

Table 2. Fields, Conditions, and Possible Values for Driver Filter Criteria
FIELDCONDITIONSVALUE
Driver Name

Driver Version

Provider

Environment

Driver File Path

Config File Path

Data File Path

Default Datatype

Hardware ID

Help File Path

Language Monitor

Manufacturer

OEM URL

Inf Path

Print Processor

Driver Data

Type

Driver Isolation

Server Name
Is exactly, is not exactly, begins with, not begin with, ends with, not end with, contains, not contains(type a value to specify)
PackagedIs exactly, is not exactlyFalse, true
Other -----------------
- Managing Printing : How Printing Works in Windows 7
- Taking Advantage of Volume Licensing : KMS and the Client (part 2)
- Taking Advantage of Volume Licensing : KMS and the Client (part 1) - Changing the Client License Type After Installation & Postponing Activation
- Power Searches - AND, OR, and NOT searches, Date and number searches
- Microsoft Access 2010 : Exporting Information (part 2) - Exporting to XML Files
- Microsoft Access 2010 : Exporting Information (part 1)
- Microsoft Project 2010 : Saving a Set of Columns as a Table
- Microsoft Project 2010 : Adding and Removing Columns in a View
- Metadata and Power Searches : Setting Properties When You Save & Personalizing Searches
- Metadata and Power Searches : Working with File Properties
- Tracking Your Licenses with the Key Management Service (part 2) - Configuring DNS to Let KMS Clients Find the KMS Server
- Tracking Your Licenses with the Key Management Service (part 1) - Installing and Initializing KMS
- Taking Advantage of Volume Licensing : Choosing the Right Volume License Key for Windows
- Windows 7 Kernel Mode Drivers Overview and Operations : KMDF I/O Model (part 2)
- Windows 7 Kernel Mode Drivers Overview and Operations : KMDF I/O Model (part 1) - I/O Request Handler
- Windows 7 Kernel Mode Drivers Overview and Operations : KMDF Object Model
- Windows 7 Kernel Mode Drivers Overview and Operations (part 2) - Device Objects and Driver Roles
- Windows 7 Kernel Mode Drivers Overview and Operations (part 1)
- Microsoft Power Point 2010 : Inserting a Diagram & Editing SmartArt Text
- Microsoft Power Point 2010 : Understanding SmartArt Types and Their Uses
 
 
Most view of day
- Microsoft Exchange Server 2010 : Working with SMTP Connectors, Sites, and Links (part 2) - Viewing and Managing Active Directory Site Link Details
- Extending Dynamics GP with Free Software : Preventing date errors with DocDateVerify, Executing SQL from the Support Administrator Console
- Editing Digital Video with Windows Live Movie Maker (part 3) - Importing Content
- Leveraging the SharePoint Workspace : Leveraging the SharePoint Workspace, View Your List and Display Form Offline
- Managing Windows 7 : Managing Touch Settings
- Windows Server 2012 : Full Windows experience (part 1) - RemoteFX enhancements,Configuring RemoteFX, Enhanced USB redirection
- Windows Server 2012 : Configuring IPsec (part 7) - Configuring connection security rules - Monitoring IPsec
- Windows Server 2012 Requirements and Installation : Switching Between Install Modes
- Windows Server 2012 : Configuring IPv6/IPv4 interoperability (part 6) - Configuring a DHCPv6 server, IPv6 transition technologies
- Microsoft Visio 2010 : Linking External Data to Shapes (part 5) - Using Link Data - Preparing a Master for Link Data , Importing Data for Link Data
Top 10
- Windows Phone 8 : Configuring Mailbox Settings (part 5) - Configuring Automatic Replies
- Windows Phone 8 : Configuring Mailbox Settings (part 4) - Lightening the Display,Changing the Mailbox Sync Settings
- Windows Phone 8 : Configuring Mailbox Settings (part 3) - Message Signatures, Blind CCing Yourself
- Windows Phone 8 : Configuring Mailbox Settings (part 2) - Unlinking Mailboxes, Conversation View
- Windows Phone 8 : Configuring Mailbox Settings (part 1) - Linking Mailboxes
- Managing Windows Server 2012 Systems : Configuring Roles, Role Services, and Features (part 6) - Tracking installed roles, role services, and features
- Managing Windows Server 2012 Systems : Configuring Roles, Role Services, and Features (part 5) - Installing components at the prompt
- Managing Windows Server 2012 Systems : Configuring Roles, Role Services, and Features (part 4) - Managing server binaries
- Managing Windows Server 2012 Systems : Configuring Roles, Role Services, and Features (part 3) - Adding server roles and features
- Managing Windows Server 2012 Systems : Configuring Roles, Role Services, and Features (part 2) - Installing components with Server Manager - Viewing configured roles and role services
 
 
Windows XP
Windows Vista
Windows 7
Windows Azure
Windows Server
Windows Phone
2015 Camaro