+ Post New Thread
Results 1 to 8 of 8
Windows Thread, Printer properties in Technical; I'd like to allow students to see the printers and faxes control panel option so they can view and delete ...
  1. #1
    cookie_monster's Avatar
    Join Date
    May 2007
    Location
    Derbyshire
    Posts
    4,217
    Thank Post
    394
    Thanked 278 Times in 239 Posts
    Rep Power
    75

    Printer properties

    I'd like to allow students to see the printers and faxes control panel option so they can view and delete their work from the print queue but i don't like how much info they can see about the print server when they look in properties. If they open printers and faxes then select properties of a printer on the print server they can select the ports tab and view the share name of every printer on the server. They can then use this name to connect to some of them using a browser and some of the HP printers only password protect against changes not viewing settings.

    Anyone know how to prevent this or am i back to hiding printers and faxes?

  2. #2

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,342
    Thank Post
    242
    Thanked 1,602 Times in 1,278 Posts
    Rep Power
    346
    On the server, right click the printer, choose Properties and then the Security tab. Add the students group (whatever you've called it) and tick (to enable) Print and Manage Documents only. Leave Manage Printers unticked.

    Students can then print and delete their documents in the queue, but cannot change any of the settings on the printer properties as it'll all be greyed out.

  3. #3
    cookie_monster's Avatar
    Join Date
    May 2007
    Location
    Derbyshire
    Posts
    4,217
    Thank Post
    394
    Thanked 278 Times in 239 Posts
    Rep Power
    75
    All of our printers have 'print' only for the users group i only add manage documents for teachers as the owner (student) has ownership over their own jobs and so can delete them anyway.

    This isn't really the issue it's if they view properties of a printer on the print server they can select the ports tab and view the share name of every printer on the server.

  4. #4

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,342
    Thank Post
    242
    Thanked 1,602 Times in 1,278 Posts
    Rep Power
    346
    That's a little strange because it should be greyed out. It all comes under Manage Printers. I suppose you could try forcing Deny if you haven't already?

  5. #5

    maniac's Avatar
    Join Date
    Feb 2007
    Location
    Kent
    Posts
    3,087
    Thank Post
    210
    Thanked 432 Times in 312 Posts
    Rep Power
    145
    Quote Originally Posted by cookie_monster View Post
    All of our printers have 'print' only for the users group i only add manage documents for teachers as the owner (student) has ownership over their own jobs and so can delete them anyway.

    This isn't really the issue it's if they view properties of a printer on the print server they can select the ports tab and view the share name of every printer on the server.
    I've never been worried if students know IP numbers or share names for things around this school, as I'm very careful with security when we set things up, so even if they have the share name of a printer they're not supposed to know about, they can't access it because the students group is specifically denied on the access list. All my printers actually have a label with the IP number and share name on the front of the printer anyway!
    It makes it so much easier when we move things around the building!. They don't have access to add printers so it's impossible for them to print to printers that havn't been mapped by logon scripts etc.

    Mike

  6. #6
    cookie_monster's Avatar
    Join Date
    May 2007
    Location
    Derbyshire
    Posts
    4,217
    Thank Post
    394
    Thanked 278 Times in 239 Posts
    Rep Power
    75
    @ Michael: it is all greyed out but they can still view the information i'd just prefer that they couldn't. I can't deny them access as they then can print.


    @ maniac: all of the printer are password protected but some of the HP printers allow you to see quite a bit of info and only askes for the password if you try to make changes. Again it's just handing out more info to the casual browser than i would like.

    They don't have access to add printers so it's impossible for them to print to printers that havn't been mapped by logon scripts etc
    Surely then could just use Network.AddwindowsPrinterConnection "\\server\printer" and then print to it.


    As i say it's not world ending stuff but i'd prefer that it wasn't available to them.
    Last edited by cookie_monster; 23rd July 2008 at 12:02 PM.

  7. #7

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,342
    Thank Post
    242
    Thanked 1,602 Times in 1,278 Posts
    Rep Power
    346
    @ Michael: it is all greyed out but they can still view the information i'd just prefer that they couldn't. I can't deny them access as they then can print.
    I meant just force Deny Manage Printers, so they can still print but not manage the printers, so it'll all be greyed out. As for hiding that information altogether, I don't believe it's possible. I think it's just how Windows has been designed, and I take your point about security. I seem to come across networks that have never heard of the word security!

  8. #8
    cookie_monster's Avatar
    Join Date
    May 2007
    Location
    Derbyshire
    Posts
    4,217
    Thank Post
    394
    Thanked 278 Times in 239 Posts
    Rep Power
    75
    I think that was more a misunderstanding they don't have manage permissions they only have print so i don't think deny will be necessary, i just don't think i explained it very well.

    Cheers.
    Last edited by cookie_monster; 23rd July 2008 at 04:26 PM.



SHARE:
+ Post New Thread

Similar Threads

  1. System Properties
    By JAW$ in forum Windows
    Replies: 5
    Last Post: 7th March 2008, 12:43 AM
  2. Replies: 13
    Last Post: 20th February 2008, 05:29 PM
  3. Setting table properties in CSS
    By AnnDroyd in forum Web Development
    Replies: 3
    Last Post: 13th December 2007, 10:39 AM
  4. Replies: 6
    Last Post: 23rd June 2007, 09:44 AM
  5. unable to change tcpip properties?
    By browolf in forum Windows
    Replies: 5
    Last Post: 13th December 2006, 01:15 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •