Configuring Default Security for Print Servers

In Windows Server 2008 and earlier versions, the following permissions are assigned by default when a new printer is added to the Print Management console:

• Administrator has Print, Manage Printers, and Manage Documents permissions.
• Creator Owner has Manage Documents permission.
• Everyone has Print permission.

If an administrator wants to modify these permissions for all printers on a print server running on one of these platforms, he needs to open the properties for each printer individually and make the necessary changes on the Security tab of each printer's properties sheet. This can be inconvenient if the administrator needs to modify printer permissions to comply with corporate security policy.

New in Windows Server 2008 R2 is the capability of modifying the default security settings for all printers installed on a print server. This can be configured by using the new Security tab on the properties sheet for a print server. Any changes made to these default security settings will then be inherited automatically by any new printers added to the print server. Changes to these default security settings do not modify the permissions for any existing printers on the print server.

You can modify a print server's default security settings by using Print Management running on Windows 7 or Windows Server 2008 R2. You can also take or assign ownership of a print server by clicking Advanced and selecting the Owner tab of the Advanced Security Settings dialog box.

Note A user must have View Server permission to view printer settings on a print server. A user must have Manage Server permission to add or delete printers, drivers, ports, and forms on printers or to modify settings on a print server.