Logo
Windows XP
Windows Vista
Windows 7
Windows Azure
Windows Server
Windows Phone
EPL Standings
 
 
Windows 7

Understanding the Print Management Console (part 2) - Configuring Default Security for Print Servers

1/6/2012 4:32:34 PM

4. Configuring Default Security for Print Servers

In Windows Server 2008 and earlier versions, the following permissions are assigned by default when a new printer is added to the Print Management console:

  • Administrator has Print, Manage Printers, and Manage Documents permissions.

  • Creator Owner has Manage Documents permission.

  • Everyone has Print permission.

If an administrator wants to modify these permissions for all printers on a print server running on one of these platforms, he needs to open the properties for each printer individually and make the necessary changes on the Security tab of each printer's properties sheet. This can be inconvenient if the administrator needs to modify printer permissions to comply with corporate security policy.

New in Windows Server 2008 R2 is the capability of modifying the default security settings for all printers installed on a print server. This can be configured by using the new Security tab on the properties sheet for a print server (as shown in Figure 2). Any changes made to these default security settings will then be inherited automatically by any new printers added to the print server. Changes to these default security settings do not modify the permissions for any existing printers on the print server.

Figure 2. Configuring default security settings for new printers created on a print server


You can modify a print server's default security settings by using Print Management running on Windows 7 or Windows Server 2008 R2. You can also take or assign ownership of a print server by clicking Advanced and selecting the Owner tab of the Advanced Security Settings dialog box.


Note:

A user must have View Server permission to view printer settings on a print server. A user must have Manage Server permission to add or delete printers, drivers, ports, and forms on printers or to modify settings on a print server.


5. Adding Printers Using the Network Printer Installation Wizard

To add printers using the Network Printer Installation Wizard, follow these steps:

  1. Add at least one print server to the list of managed print servers.

  2. Right-click a print server and select Add Printer to start the Network Printer Installation Wizard.



  3. Do one of the following:

    • To scan the local subnet for TCP/IP or WSD network printers automatically, select Search The Network For Printers and then click Next. As the scan progresses, Windows will display a list of available network printers and will install them automatically on the selected print server. (You might be required to specify a driver for a printer manually if Windows cannot find one automatically.)

    • To add a specific TCP/IP or WSD network printer to the list of printers managed by the print server manually, select Add A TCP/IP Or Web Services Printer By IP Address Or Hostname, specify the name or IP address of the printer, and then click Next.

    • To add a new printer using an existing port, which can be either a local port (LTP or COM) or a previously added TCP/IP port, select Add A New Printer Using An Existing Port, click Next, and either install the printer driver automatically selected by the wizard, select an existing driver, or install a new driver either from the CD media included with the driver or by using Windows Update.

    • To create a new local port and install a printer on it, select Create A New Port And Add A New Printer, click Next, specify a name for the new port, and then either install the printer driver automatically selected by the wizard, select an existing driver, or install a new driver.


Note:

The option for automatically detecting printers on the local subnet using Search The Network For Printers cannot work across a firewall. If you want to use this feature to detect printers for another location, such as a remote subnet at a branch office location that is located behind a firewall, use Remote Desktop to connect to a Windows Server 2003 R2 or later computer at the remote location, start Print Management, and then select Search The Network For Printers as described previously.


In addition to the new Network Printer Installation Wizard, the end-user Add Printer Wizard is still present in Windows 7 and has been enhanced to allow users to add local, network, wireless, and Bluetooth printers and also to search Windows Update for printer drivers when needed.

HOW IT WORKS

WSD Printers

WSD is a new type of network connectivity supported by Windows Vista and later versions. With WSD, users can have a Plug and Play experience similar to that with universal serial bus (USB) devices over the network rather than only with locally connected devices.

In Windows Vista and later versions, WSD printer ports are serviced by the WSD Port Monitor (WSDMon) instead of the Standard Port Monitor (TCPMon) used to service TCP/IP ports. WSDMon is used by default if a printer supports it; otherwise, it defaults to TCPMon.

For more information about the various Web Services specifications and their support on Windows platforms, see http://msdn.microsoft.com/en-us/library/ms951274.aspx on MSDN. You can find additional information on WSD printer support in Windows Vista and later versions on WHDC at http://www.microsoft.com/whdc/device/print/default.mspx.


6. Creating and Using Printer Filters

You can use Print Management to create custom printer filters to simplify the task of managing hundreds of print servers and thousands of printers. To create a custom printer filter, follow these steps:

  1. Right-click the Custom Filters node in Print Management and select Add New Printer Filter.

  2. Type a name and description for the new filter. For example, type All HP Printers for a filter that displays printers whose driver names begin with HP, indicating Hewlett-Packard printers. If desired, select the check box labeled Display The Total Number Of Printers Next To The Name Of The Printer Filter and then click Next.

  3. Specify up to six filter criteria for your new filter. For example, to filter for printers whose driver names begin with HP, select the Driver Name field and the Begins With condition and type HP as the value.



  4. Click Next and configure an e-mail notification or script action that occurs when a printer matches the filter criteria specified by the filter.

  5. Click Finish to create the new filter. Select the new filter to activate it and display printers that meet the criteria specified by the filter.

Table 1 lists the filter criteria fields, conditions, and possible values that you can specify when you create a custom printer filter. Filter criteria fields marked with an asterisk (*) are new to Print Management in Windows 7 and Windows Server 2008 R2.

Table1. Fields, Conditions, and Possible Values for Printer Filter Criteria
FIELDCONDITIONSVALUE
Printer Name

Server Name

Comments

Driver Name

Location

Shared Name

Driver Version*

Provider*
Is exactly, is not exactly, begins with, not begin with, ends with, not end with, contains, not contains(type a value to specify)
Queue StatusIs exactly, is not exactlyReady, paused, error, deleting, paper jam, out of paper, manual feed required, paper problem, offline, IO active, busy, printing, output bin full, not available, waiting, processing, initializing, warming up, toner/ink low, no toner/ink, page punt, user intervention required, out of memory, door open
Jobs in QueueIs exactly, is not exactly, is less than, is less than or equal to, is greater than, is greater than or equal to(type a value to specify)
Is SharedIs exactly, is not exactlyFalse, true


Note:

To modify a printer filter after you create it, right-click the filter and then select Properties.


7. Creating and Using Driver Filters

A new feature of Print Management in Windows 7 and Windows Server 2008 R2 is the ability to create custom driver filters to simplify the task of managing all of your printer drivers on your print servers. To create a custom driver filter, follow these steps:

  1. Right-click the Custom Filters node in Print Management and select Add New Driver Filter.

  2. Type a name and description for the new filter. For example, type Legacy Drivers for a filter that displays printer drivers that don't support driver isolation.

  3. Click Next and specify up to six filter criteria for your new filter. For example, to filter for printer drivers that don't support driver isolation, select the Driver Isolation field and the Is Exactly condition, and type None for the value.

  4. Click Next and continue configuring the filter as described in the previous section.

Table 2 lists the filter criteria fields, conditions, and possible values that you can specify when you create a custom driver filter.

Table 2. Fields, Conditions, and Possible Values for Driver Filter Criteria
FIELDCONDITIONSVALUE
Driver Name

Driver Version

Provider

Environment

Driver File Path

Config File Path

Data File Path

Default Datatype

Hardware ID

Help File Path

Language Monitor

Manufacturer

OEM URL

Inf Path

Print Processor

Driver Data

Type

Driver Isolation

Server Name
Is exactly, is not exactly, begins with, not begin with, ends with, not end with, contains, not contains(type a value to specify)
PackagedIs exactly, is not exactlyFalse, true
Top Search -----------------
- Enabling and Customizing Pen and Touch Features
- Microsoft Visio 2010 : Creating Swimlane Diagrams
- Managing Printing : Deploying Printers Using Group Policy
- Activating and Validating Windows 7
- Managing Disks from the Command Prompt
- Microsoft Excel 2010 : Adding and Deleting a Data Series
- Networking with Windows 7 : Resolving Names to IP Addresses
- Sharing Printers, Scanners, and Fax Machines
- Microsoft Word 2010 : Saving a Document with Macros & Opening a Document with Macros
- Managing Printers Using Print Management (part 2) - Configuring Printer Driver Isolation Mode
Other -----------------
- Managing Printing : How Printing Works in Windows 7
- Taking Advantage of Volume Licensing : KMS and the Client (part 2)
- Taking Advantage of Volume Licensing : KMS and the Client (part 1) - Changing the Client License Type After Installation & Postponing Activation
- Power Searches - AND, OR, and NOT searches, Date and number searches
- Microsoft Access 2010 : Exporting Information (part 2) - Exporting to XML Files
- Microsoft Access 2010 : Exporting Information (part 1)
- Microsoft Project 2010 : Saving a Set of Columns as a Table
- Microsoft Project 2010 : Adding and Removing Columns in a View
- Metadata and Power Searches : Setting Properties When You Save & Personalizing Searches
- Metadata and Power Searches : Working with File Properties
 
 
Most view of day
- Windows Server 2008 Server Core : Compressing Data with the Compact Utility
- Manage the Active Directory Domain Services Schema : Remove Attributes from the Index
- Add an InfoPath Form Web Part to a SharePoint Web Part Page
- Microsoft Systems Management Server 2003 : Defining Parent-Child Relationships (part 2) - Installing the Secondary Site Locally from the SMS CD
- Windows Server 2003 : Analyzing Traffic Using Network Monitor (part 1)
- BizTalk 2009 : Host Integration Server 2009 - Planning Your Host Integration Server Topology
- Using Windows Live Programs (part 2) - Using Windows Live Mail
Top 10
- Automating Windows 7 Installation : Customizing Images Using Deployment Image Servicing and Management (part 3) - Servicing the Operating System in an Image , Committing an Image
- Automating Windows 7 Installation : Customizing Images Using Deployment Image Servicing and Management (part 2) - Mounting an Image , Servicing Drivers in an Image
- Automating Windows 7 Installation : Customizing Images Using Deployment Image Servicing and Management (part 1) - Viewing Information about an Image with DISM
- Automating Windows 7 Installation : Applying an Image Using ImageX
- Automating Windows 7 Installation : Capturing an Image Using ImageX
- Microsoft Visio 2010 : Creating Web Pages from Visio Drawings (part 4) - Fine-tuning Web Pages and Battling Bugs - Saving a Visio Drawing as a Web Page
- Microsoft Visio 2010 : Creating Web Pages from Visio Drawings (part 3) - Fine-tuning Web Pages and Battling Bugs - Customizing Web Page Output
- Microsoft Visio 2010 : Creating Web Pages from Visio Drawings (part 2) - Exploring Visio-Generated Web Pages
- Microsoft Visio 2010 : Creating Web Pages from Visio Drawings (part 1) - Saving as Web Page
- Microsoft Visio 2010 : Sending Visio Files in Email, Saving as PDF or XPS Files
Windows XP
Windows Vista
Windows 7
Windows Azure
Windows Server
Windows Phone
2015 Camaro