Sunday, November 25, 2007

Printers and Scanners: Limiting Access on Network printers

You are configuring a laser jet printer for the Marketing department. The printer is attached directly to the network. You need to limit access to the printer to only users in the Marketing department. Users should be able to delete their own documents from the print queue. The Marketing manager should be able to delete any document from the print queue.
What should you do?

1. On each user's computer, create a printer object. Grant the user Manage Documents permission to the printer object. On the Marketing manager's computer, create a printer object and grant the Manage Printers permission.
2. On each user's computer, create a printer object. Grant the user Print permission to the printer object. On the Marketing manager's computer, create a printer object and grant the Manage Documents permission.
3. >>Create a shared printer object on a computer running Windows XP, Windows 2000, or Windows Server 2003. Grant the Marketing group the Manage Documents permission. Grant the Marketing manager the Manage Printers permission.
4. Create a shared printer object on a computer running Windows XP, Windows 2000, or Windows Server 2003. Grant the Marketing group the Print permission. Grant the Marketing manager the Manage Documents permission.

Explanation : You should create a shared printer object on a computer running Windows XP, Windows 2000, or Windows Server 2003. Then you should grant the Marketing group the Print permission and the Marketing manager the Manage Documents permission. You can create a printer object that is mapped to a network-attached printer so that you can manage permissions and the print queue from a single computer. The computer with the shared printer object is a print server for the printer. The Print permission is required to allow users to print to a printer. Users with the Print permission can also manage their own documents in the queue. Managing other users' documents requires the Manage Documents permission.

You should not create a printer object on each user's computer. Doing so will cause multiple queues to be associated with the printer. The queue and permissions will not be managed separately.

You should not grant the Marketing group the Manage Documents permission. Doing so will enable them to manage any document in the queue.

You should not grant the Marketing manager the Manage Printers permission. Doing so will allow the manager to install printer drivers and modify printer configuration settings.
Objective: Printers and Scanners