A. In Server 2003, the Print Operators group doesn’t have permissions to control the Print Spooler service. To enable the Print Operators group to control the Print Spooler service, you need to modify the Print-Spooler-service security configuration. Group Policy is the easiest way to modify the Print-Spooler-service security configuration. Open Computer Configuration, Policies, Windows Settings, Security Settings, System Services. Then, select Print Spooler, and Edit Security. Grant start, stop, and pause permissions to any group that needs to control the Print Spooler.
Yes, but *why* doesn't this group have the necessary access by default? I'm sure there's a logical reason for this lurking somewhere but I doubt I'm alone (& the existence of this FAQ leads me to believe I'm not) in thinking this is the most obvious built in group to have such access.
duncan_priest August 06, 2008 (Article Rating: )
Duncan- I sent John your comment and this is his reply: "I don't know. Microsoft decision. I suspect there might have been concerns over security—that services could be "used" for other purposes —and removing the Print Operators group's ability to modify the service added a layer of protection. Thanks for reading. -Todd Erickson
Order Your Fundamentals CD Today! Register today for your in-depth copy of one of three Fundamental CDs on the following topics – Exchange, SQL, and SharePoint.
)
)
ws3d July 30, 2008 (Article Rating: