Once a printer is made available from a print server, default printer permissions are assigned. These default permissions allow the Everyone group (that is, all users) to print. Other select groups have the ability to manage the printer, manage documents sent to it, or both. But you might not want just any user to print to the shared printer. Instead, you might want to limit access for some users by assigning specific printer permissions.
For example, you might give all standard users in a department the Print permission and give all managers the Print and Manage Documents permissions. In this way, all users and managers can print documents, but managers can also change the print status of any document sent to the printer. Furthermore, by default the "Creator Owner" special group has the Manage Documents permission. This means that users can manage all documents that they own. For example, the owner of a document can send a job to the print queue and then cancel its printing if they change their mind.
This behavior is a departure from the behavior of NTFS and Share permissions, in which the Everyone group has the Full Control permission until an administrator tightens security settings. For this reason, you typically won't have to do much configuring of the security permissions of printers.
You control which users have access to a shared printer that you make available from your print server through the Security tab of the printer's Properties dialog box, as shown in Figure 8-7. (See the sidebar in this section if you don't see the Security tab.)
Figure 8-7. The printer's Security tab.
To change the permission settings for a printer, you must have the Manage Printers permission, and then follow these steps: