Windows Server 2012 R2 Storage, Security, & Networking Pocket Consultant

PERMISSION	PRINT	MANAGE DOCUMENTS	MANAGE THIS PRINTER
Print documents	X	X	X
Pause, restart, resume, and cancel own documents	X	X	X
Connect to printers	X	X	X
Control settings for print job		X	X
Pause, restart, and delete print jobs			X
Share printers			X
Change printer properties			X
Change printer permissions			X
Delete printers			X

The default permissions are used for any new network printer you create. These settings are as follows:

■ Members of the Administrators, Print Operators, and Server Operators groups have full control over printers by default. This makes it possible for you to administer a printer and its print jobs.

■ The creator or owner of the document can manage his or her own document. This enables the person who printed a document to change its settings and to delete it.

■ Everyone can print to the printer. This makes the printer accessible to all users on the network.

As with other permission sets, you create the basic permissions for printers by combining special permissions into logical groups. Table 10-3 shows special permissions used to create the basic permissions for printers. By using Advanced permission settings, you can assign these special permissions individually if necessary.

TABLE 10-3 Special permissions for printers

SPECIAL PERMISSION	PRINT	MANAGE DOCUMENTS	MANAGE THIS PRINTER
Print	X		X
Manage Documents		X
Manage This Printer			X
Read Permissions	X	X	X
Change Permissions		X	X
Take Ownership		X	X

Auditing print jobs

Windows Server 2012 R2 lets you audit common printer tasks by following these steps:

1. Open the printer’s Properties dialog box, and then tap or click the Security tab. Tap or click Advanced to open the Advanced Security Settings dialog box.

NOTE Actions aren’t audited by default. You must first enable auditing by establishing a group policy to audit the printer.

2. On the Auditing tab, add the names of users or groups you want to audit by using the Add button and remove names of users or groups by using the Remove button.

3. Select the events you want to audit by selecting the check boxes under the Successful and Failed headings, as appropriate.

4. Tap or click OK.

Setting document defaults

Document default settings are used only when you print from applications that are not based on Windows, such as when you print from the command prompt. You can set document defaults by following these steps:

1. Open the printer’s Properties dialog box, and then tap or click the General tab.

2. Tap or click Preferences.

3. Use the text boxes on the tabs provided to configure the default settings.

Configuring print server properties

Windows Server 2012 R2 enables you to control global settings for print servers by using the Print Server Properties dialog box. In Print Management, press and hold or right-click the server entry for the print server with which you want to work, and then tap or click Properties. If the print server isn’t listed, you can add it in the Add/ Remove Servers dialog box. To open the dialog box, press and hold or right-click Print Servers, and then tap or click Add/Remove Servers.

The sections that follow examine some of the print server properties that you can configure.

Locating the Spool folder and enabling printing on NTFS

The Spool folder holds a copy of all documents in the printer spool. By default, this folder is located at %SystemRoot%\System32\Spool\Printers. On the NTFS file system, all users who access the printer must have Modify permission on this directory. If they don’t, they won’t be able to print documents.

If you’re experiencing problems, check the permission on this directory by following these steps:

1. Access the Print Server Properties dialog box.