Restricted access still domain user able to change shared printer property

Hi


Within Active Directory environment (win2003 server) I have got 11 domains users.

A new network printer Samsung CLX-6210FX installed on the server 2003 and shared

Samsung Printer > Properties > Security tab for the group “Everyone “ set as below

http://i46.tinypic.com/qobogo.jpg


Although “ Everyone “ group has been given permission for print only , why would a domain user still be able to change the color as in the snap shot below

http://i48.tinypic.com/2nkkw94.jpg


Thanks

 

The first image for the printer property on the server

The second image when I installed the shared printer on a client PC

 

A user has the right to modify settings for their own print jobs using the print driver on the local machine. The job is then sent to the print server for processing/printing.
Print permission allows a user to print to the printer. Manage documents allows a user to manage not only their own docs (which is inherent), but other users as well. Manage printers allows a user to modify printer settings such as ports, spool options, etc.
A link for you.

 

Okay noted.

But looking at the " Security " tab for the printer properties (first snap shoot) neither " Manage Printers " option , nor " Manage Documents" were chosen !!!

Are saying that a user domain being able to change a color, because this is not part of a " Manage Documents " option , and since " Manage Documents " is not chosen therefore he/she would be to change that

 

Since you have not granted the user the Manage Printers permission, the change that is being made is only for print jobs being submitted by that user. It will not affect other users.
When a printer is installed along with it's software driver, it will give a user options that can be set on the local machine. To use your example, a user could tell the printer (actually the print driver on the local machine) that instead of printing in color, print in greyscale. The print driver will create the print job in greyscale on the local machine and then pass it to the server. The server will then process the job as it received and send it to the printer itself. No changes were made to the printer installed on the server itself. It is all handled by the software drivers.

Please follow the link in my above post which will give you a more complete explanation of printer permissions and how they apply to users and user groups.

 

Thanks amdace.
That is noted. And I will try to read the document in the link that you have posted.

Now my question can I prevent a domain user to print his files/documents in color ? If yes how can I do that ?

 

Without being familiar with your printer I would not be able to advise you on that.
Perhaps check the settings of the print driver on the system/server where the printer is shared from. Normally, disabling a function there would disable it for all users.