Managing Printer Installation Rights

Managing Printer Installation Rights

By using the "Security" tab of a printer object you can specify who can install printers from the Portal. These assignments only apply when user installs the printer from the portal. If a user installs a printer from the portal and later you remove the everyone group and add a group that the user is not a member of, the printer will still remain on the users computer.

You can grant rights by:

  • IP address range (subnet)
  • Active Directory user
  • Active Directory computer
  • Active Directory group

If the user or computer object accessing the Portal is not assigned rights or a member of a group that is assigned rights, they will not be allowed to install the printer from the portal.  When a user visits the Portal, the printer(s) are listed on the Portal regardless of whether they have rights to install the printer.  When a user attempts to install a printer they have not been granted rights to install, they will receive a prompt about not having permission to install the printer.  By default the"Everyone" group is added to the root company object’s "Security" tab and all children nodes are set to inherit the security settings from the "Company Security" tab, allowing all users to install all printers.

There are three recommended ways to make changes to security assignments in a "Printer Objects Security" tab:

  • Add an explicit security assignment.
  • Make the changes to a parent object where the rights are explicitly defined (company object by default), and then the child object will inherit these security assignments.
  • Clear the "Include Inherited Security" check box and create an explicit security assignment.

Understanding Security Inheritance
Inherited permissions are those that are propagated to an object from a parent object (company or folder object). Inherited permissions ease the task of managing permissions and ensure consistency of security assignments among all objects with a given container (company or folder object).  If the "Include Inherited Security" check box is checked on an object’s "Security" tab, the object has inherited security assignments from a parent object.