I am trying to better secure our servers, and I was hoping to use the security groups that are built in to Windows 2008 servers. One in particular that looked promising is this Print Operators group. Basically what I want is for the Print Operators group to be able to add and remove printers, examine/pause and cancel all jobs in the print queue, and also to be able to start/stop/restart the print spooler on the server.
When I add a test user to this group in order to try out the functionality, however, the user is unable to do any of this. The description of the group says "members can administer domain printers" and yet the user can't do anything. What the heck is the point of this group? More importantly, how can I actually change it to allow the functionality that I am looking for? The big one is being able to start/stop the print spoolers, but I would really like to be able to do all of the aforementioned tasks.
Thanks for your time and consideration. Hopefully someone can help me out.
Jacob
Jacob100
