Big news! The community will be moving to a new platform April 21. Read more.
Big news! The community will be moving to a new platform April 21. Read more.
Absent Member.
Absent Member.
3726 views

Security Permissions for Printer on Windows XP and Windows 7

Hello,

We are a big company with a lot of Iprint Netware servers at every location. We are at the testing phase where we will be creating the new OES Iprint server for every location running on SUSE LINUX.
I am almost done with the Iprint configuration at every location.
When I install the driver from IPP page of the server, installation goes great for Win 7 64 bit but when I go to Devices and Printers - Properties of the Printer - Security Tab.
I see Everyone, Creator Owner, Administrators and Power users user group can Print, Manage Printer, Manager Documents so in short all of them have full access on the Printer which should not be the case.
As per the Microsoft document when we install any Printer it should have the below mentioned permissions.
Everyone user group should only be able to Print
Creator Owner should only be able to manage there documents.
Power users should be able to Print, Manage Printer and Manage Documents.
Administators should be able to Print, Manager Printer and Manage Documents.

The above security is the default securites set by Microsoft when we install any Printer on the workstation.

I did some testing as we still have Netware Iprint servers in the environment. I installed the driver from Netware IPP page and I see all the default printer security settings in the Printer - Security tab where Everyone is only able to Print and CREATOR OWNER is only able to manage Documents and Administrators and Power users have full access on the Printer.

We have thousands of users who will be very soon using the Iprint Suse linux servers and will be installing the Printer from IPP page. We cannot modify this settings manually on each and every user workstations as there should be a way to fix this either from the server side or any tool?

Installing the driver from Netware IPP page comes up with all the default Printer security settings but Installing the driver from OES suse linux IPP page does not come up with proper Printer security settings which makes me think that there is something wrong either from the server side or from the IPRINT application itself.

I have already tried uninstalling and reinstalling the new iprint client on Win xp and Win 7 Workstations.
Tried with new test Win 7 machines with no prior Network Printer installations, still the same issue.

Has anyone came accross this issue before?
is this a bug with Iprint?

Novell,
All thoughts are welcomed.

Regards,
Sanjay K.
0 Likes
4 Replies
Knowledge Partner Knowledge Partner
Knowledge Partner

skishnani;2121002 wrote:
Hello,

We are a big company with a lot of Iprint Netware servers at every location. We are at the testing phase where we will be creating the new OES Iprint server for every location running on SUSE LINUX.
I am almost done with the Iprint configuration at every location.
When I install the driver from IPP page of the server, installation goes great for Win 7 64 bit but when I go to Devices and Printers - Properties of the Printer - Security Tab.
I see Everyone, Creator Owner, Administrators and Power users user group can Print, Manage Printer, Manager Documents so in short all of them have full access on the Printer which should not be the case.
As per the Microsoft document when we install any Printer it should have the below mentioned permissions.
Everyone user group should only be able to Print
Creator Owner should only be able to manage there documents.
Power users should be able to Print, Manage Printer and Manage Documents.
Administators should be able to Print, Manager Printer and Manage Documents.

The above security is the default securites set by Microsoft when we install any Printer on the workstation.

I did some testing as we still have Netware Iprint servers in the environment. I installed the driver from Netware IPP page and I see all the default printer security settings in the Printer - Security tab where Everyone is only able to Print and CREATOR OWNER is only able to manage Documents and Administrators and Power users have full access on the Printer.

We have thousands of users who will be very soon using the Iprint Suse linux servers and will be installing the Printer from IPP page. We cannot modify this settings manually on each and every user workstations as there should be a way to fix this either from the server side or any tool?

Installing the driver from Netware IPP page comes up with all the default Printer security settings but Installing the driver from OES suse linux IPP page does not come up with proper Printer security settings which makes me think that there is something wrong either from the server side or from the IPRINT application itself.

I have already tried uninstalling and reinstalling the new iprint client on Win xp and Win 7 Workstations.
Tried with new test Win 7 machines with no prior Network Printer installations, still the same issue.

Has anyone came accross this issue before?
is this a bug with Iprint?

Novell,
All thoughts are welcomed.

Regards,
Sanjay K.


Take a look at AllowUserPrinters section in /var/opt/novell/iprint/htdocs/iprint.ini

Thomas
0 Likes
Absent Member.
Absent Member.

Hi Thomas,

I changed AllowUserPrinters=1 in iprint.ini and I restarted the Iprint services but that did not changed the security policies of the printer.
As far as I can understand that setting is only responsible for Add/Delete/Modify the printer but security permissions still remains the same.
I still see Everyone, Creator Owner, Administrators and Power users user group can Print, Manage Printer, Manager Documents so in short all of them have full access on the Printer which should not be the case.
We don't want everyone to Manage documents and manage printer, we don't want 'creator owner' group to have full rights on the Printer as per the company policies.
Everyone user group should only be able to Print
Creator Owner should only be able to manage there documents.
Power users should be able to Print, Manage Printer and Manage Documents.
Administators should be able to Print, Manager Printer and Manage Documents.

Is there any other settings that needs to be changed?

Thanks for all your help !!

Regards,
Sanjay K.
0 Likes
Knowledge Partner Knowledge Partner
Knowledge Partner

skishnani;2121956 wrote:
Hi Thomas,

I changed AllowUserPrinters=1 in iprint.ini and I restarted the Iprint services but that did not changed the security policies of the printer.
As far as I can understand that setting is only responsible for Add/Delete/Modify the printer but security permissions still remains the same.
I still see Everyone, Creator Owner, Administrators and Power users user group can Print, Manage Printer, Manager Documents so in short all of them have full access on the Printer which should not be the case.
We don't want everyone to Manage documents and manage printer, we don't want 'creator owner' group to have full rights on the Printer as per the company policies.
Everyone user group should only be able to Print
Creator Owner should only be able to manage there documents.
Power users should be able to Print, Manage Printer and Manage Documents.
Administators should be able to Print, Manager Printer and Manage Documents.

Is there any other settings that needs to be changed?

Thanks for all your help !!

Regards,
Sanjay K.


Did you reinstall the printer on the workstation after changing that setting?

We have AllowUserPrinters=3 and on the security page of a printer installed on a W7 device I can see that "Everyone" only is allowed to Print.

Thomas
0 Likes
Absent Member.
Absent Member.

Yes I reinstalled the Printer on W7 and XP machine serveral times and still the same issue.
I tried AllowUserPrinters=1 and then 3 and restarted, uninstalled the Printer and reinstalled and still the same issue.
I observed one more weird thing. When I install the Printer in XP machine I only see EVERYONE group with all the rights, CREATOR OWNER and POWER USER group is missing.
Whereas when I install the Printer on Win7 machine, I can see all groups but every group has all the rights to manage the Printer which is wrong.
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.