Once you have deployed your print devices, created printers for them,
shared them, and listed them in the AD DS directory, you can manage
them all from the Windows SBS Console on your primary server, no matter
which computers you are using as print servers. When you click the Network button in the console and select the Devices tab, you see a list of the shared printers on the network, as shown in Figure 1.
By selecting a printer and clicking one of the items in the printer-specific Tasks list, you can perform the management tasks described in the following sections.
Managing Queued Print Jobs
When you select a printer and click Printer jobs in the Tasks
list, a window appears, named for the printer and containing a list of
the jobs currently waiting in the print queue, as shown in Figure 2.
With the appropriate permissions, you can pause, resume, and cancel
individual print jobs, as well as pause and cancel the entire queue.
Controlling Printer Access
Windows printers have their own system of permissions,
which you can use to specify who is allowed to access and manage your
shared printers. By default, Windows grants the Allow
Print permission to the Everyone special identity on all printers. This
enables all users to send jobs to the printers. The other permission
assignments, and the capabilities provided by the various print permissions, are listed in Table 1.
Table 1. Windows Printer Permission
|
PERMISSION |
CAPABILITIES |
DEFAULT ASSIGNMENTS |
|---|
|
Print |
|
-
Everyone -
Administrators -
Server Operators -
Print Operators
|
|
Manage Printers |
|
-
Administrators -
Server Operators -
Print Operators
|
|
Manage Documents |
-
Pause, resume, restart, and cancel all users’ documents -
Control job settings for all documents
|
-
Creator Owner -
Administrators -
Server Operators -
Print Operators
|
To limit printer access to specific users, you must revoke the permissions from the Everyone special identity and then grant the Allow Print permission to the users or groups that you want to give access to the printer. To modify the default print permissions, use the following procedure:
-
Log on to your Windows SBS 2011 server, using an account with network Administrator privileges. The Windows SBS Console appears.
-
Click Network, and then select the Devices tab.
-
Select the printer that you want to manage and, in the Tasks list, click Printer properties. The Properties sheet for the printer appears.
-
Click the Security tab.
The Group or user names list in the top half of the tab specifies all the security principals possessing permissions to the selected printer. The Permissions list in the bottom half of the tab specifies the permissions assigned to the selected security principal.
-
To revoke existing permissions, select one of the security principals in the Group or user names list and clear any or all of the Allow check boxes in the Permissions list.
-
To grant new permissions, click Add. The Select Users, Computers, Service Accounts, Or Groups dialog box appears.
-
In the Enter the object names to select text box, type the name of the user or group you want to add to the list and click OK. The user or group appears in the list.
-
Select the security principal you just added and, in the Permissions list, select the check boxes for the permissions you want to assign.
-
Click OK. The Properties sheet closes.
