I have a case where I need a non-priv account to be able to make a modification to the redirected printer. I know, its not advisable but we're not giving them access - changes will be made in code.

So, following the docs (http://technet.microsoft.com/en-us/library/ee524015(WS.10).aspx) I modified the default security for new printer queues. This doesnt work though as windows doesn't seem to assign the privs you configure in the printer admin tool to redirected printer queues.

As I test I added a non-priv test user to the default security tab in the printer admin tool (control panel -> admin tools -> printer admin). I assigned it all privs (it is a test) and logged the user into the terminal server.

The redirected printers appeared as usual. However, if I open the printer properties -> security tab, the user appears in the list of accounts/groups but the options I selected (all privs) are not set. Instead the user special privs box is marked and when I click on 'advanced options' and view them, there is nothing marked.

So, something is clearing these options.... the question is, why and how can I convince it not to?



Answered my own question ... again.

I needed to take ownership of the queue and then modify the security to allow me to administer the settings.

To do that I need to run cmd/explorer or print admin tool as administrator and supply the user credentials again.... obvious now that its working.

All I have do to now is get this working in a script


This script can give the users ability to modify redirected printer settings: https://github.com/zniezelski/Printerceptor/releases/

  • 1
    Please edit your answer to include relevant information from the provided link, so that when the linked-to content is gone, your answer will still have value. – womble Aug 29 '15 at 0:28

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.