UPDATE! The community will be go into read-only on April 19, 8am Pacific in preparation for migration on April 21. Read more.
UPDATE! The community will be go into read-only on April 19, 8am Pacific in preparation for migration on April 21.Read more.
Absent Member.
Absent Member.
1670 views

Printer access control

I'm starting a conversion from queue printing to NDPS in my Netware 6.5. The first printer I installed should be restricted to a few selected users, so I made this implementation creating a PRINTER group for those users and limiting the access to the printer to Admin and members of the PRINTER group. Then I tested this environment in the Admin machine, which runs Windows 2000, everything was fine. When I logged as a regular user (not a member of the PRINTER group) in this machine, this user couldn´t get the status of the printer and the print option was greyed. But, surprise, when I logged as a regular user in a Windows XP machine, the printer was totally available for the regular user and all restrictions are gone. Any idea of what happened and what should I do?

Regards

Guilherme
0 Likes
6 Replies
Absent Member.
Absent Member.

guilhermebarros wrote:

>I'm starting a conversion from queue printing to NDPS in my Netware 6.5.


Independently of your actual problem, I wonder of migrating to NDPS now is
really a good idea. Just like queue based printing, NDPS is considered an
obsolete technology by Novell and iPrint is the way to go.

--
Marcel Cox
http://support.novell.com/forums
------------------------------------------------------------------------
Marcel Cox's Profile: http://forums.novell.com/member.php?userid=8
0 Likes
Absent Member.
Absent Member.

Well, reviewing the iPrint documentation, it seems that iPrint is a generalization of NDPS to allow printing from the Internet. Since we don't use the Internet for printing, and our printers are all in the same Local Area Network, maybe NDPS is enough for us.
So I think I still need help with the problem above.
I occured to me that all my workstations use only IPX protocol for connection with the server, using IP only for the Internet.

Regards

Guilherme
0 Likes
Absent Member.
Absent Member.

Note that the name IPP (Internet Printing Protocol) does not so much mean
that it is used for printing over the internet, but rather it means that
it is using internet protocols for printing (in this case http).
NDPS while still workign in NetWare 6.5 is a legacy protocol and all the
newer printing features are only available in iPrint. Also, when moving to
Linux, NDPS will nto be supported, only iPrint is. The same holds for
Vista. Novell does not have an NDPS client for Vista, only an iPrint client.
As such, it makes sense going right away to iPrint now and not first goign
to NDPS and having to do another migration in a year or so.
As for your actual problem, it is related to the NDPS security setting.
This is explained in the following TID:

http://support.novell.com/docs/Tids/Solutions/10089134.html

--
Marcel Cox
http://support.novell.com/forums
------------------------------------------------------------------------
Marcel Cox's Profile: http://forums.novell.com/member.php?userid=8
0 Likes
Absent Member.
Absent Member.

Thanks for your explanation, I'll be moving to iPrint soon for this and my other printers which still works as queue based, just give me a time to study the topic. But in the referred TID we can see that my security problem will arise also in iPrint, and the TID doesn't give any workaround for the situation, so my problem continues:
How can I have a printer installed in the workstation by the Admin that must be available only for members of a defined Group and the Admin, and unavalaible to all other users of the same workstation?

Regards

Guilherme
0 Likes
Absent Member.
Absent Member.

guilhermebarros wrote:

>How can I have a printer installed in the workstation by the Admin that
>must be available only for members of a defined Group and the Admin, and
>unavalaible to all other users of the same workstation?


The ITD *does* give the solution. You must set the security of the printer
to "high".


Let me just summerize the crux of the TID in a few lines:

The security level of a printer specifies how rights on that printer are
enforced. The security levels are:

low: no security is enforced
medium (default): only users that have rights to the printer can install
it, but once it is installed, anyone can print to it
high: only those people that have rights to the printer can print to it

--
Marcel Cox
http://support.novell.com/forums
------------------------------------------------------------------------
Marcel Cox's Profile: http://forums.novell.com/member.php?userid=8
0 Likes
Absent Member.
Absent Member.

I checked my conditions: IPX/IP client, printer security defined at "high", printer installed by the Admin user, authorized users are only the Admin and members of the PRINTER group.
Than I installed the printer manually as the Admin in a fresh installed Windows XP workstation, logged in as user who is NOT member of the PRINTER group and this user could see the printer, the Windows printer queue ans was able to print to the printer he has no rights.
Note this problem occurs only in WinXP workstations, not in Win2000 workstations.
So my problem is not solved, and I ask for more help...

Regards

Guilherme
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.