Shared Access to Client's local Printers in Terminal Services

We are looking for a way to share access to the local workstation printers at
remote locations on our Terminal Server. For instance, we have Site A and
Site B, and the Terminal Server locatedat a main office. We would like for
users logged in from Site A to be able to print to the Printer at Site B and
vice versa. We know that users that are members of Domain Admins can do
this, but for data security reasons we cannot allow the users to have that
group membership, and without it, the users do not have sufficient
permissions to interact with printers from another user's terminal services
session, so we are looking for a script or setting to add permissions to a
printer when it is brought into a terminal services session.

Thanks,
Matt

 

"The users can change access to the printers by editing the permissions in
the printer properties to be made accessible to other users."

"jdroger2" wrote:
<!--coloro:blue--><span style="color:blue <!--/coloro-->
> We are looking for a way to share access to the local workstation printers at
> remote locations on our Terminal Server. For instance, we have Site A and
> Site B, and the Terminal Server locatedat a main office. We would like for
> users logged in from Site A to be able to print to the Printer at Site B and
> vice versa. We know that users that are members of Domain Admins can do
> this, but for data security reasons we cannot allow the users to have that
> group membership, and without it, the users do not have sufficient
> permissions to interact with printers from another user's terminal services
> session, so we are looking for a script or setting to add permissions to a
> printer when it is brought into a terminal services session.
>
> Thanks,
> Matt<!--colorc--><!--/colorc-->

 

We need a way to automate this as we cannot expect our users to do this every
time they connect to the TS. I agree that adding the permissions to the
printer is the right way to resolve this, I just need a way to implement it
that does not require user involvement.

"ahacigu" wrote:
<!--coloro:blue--><span style="color:blue <!--/coloro-->
>
>
> "The users can change access to the printers by editing the permissions in
> the printer properties to be made accessible to other users."
>
> "jdroger2" wrote:
> <!--coloro:green--><span style="color:green <!--/coloro-->
> > We are looking for a way to share access to the local workstation printers at
> > remote locations on our Terminal Server. For instance, we have Site A and
> > Site B, and the Terminal Server locatedat a main office. We would like for
> > users logged in from Site A to be able to print to the Printer at Site B and
> > vice versa. We know that users that are members of Domain Admins can do
> > this, but for data security reasons we cannot allow the users to have that
> > group membership, and without it, the users do not have sufficient
> > permissions to interact with printers from another user's terminal services
> > session, so we are looking for a script or setting to add permissions to a
> > printer when it is brought into a terminal services session.
> >
> > Thanks,
> > Matt<!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->

 

TS is not designed to solve this kind of problems.
Let me ask you this: can users from site A print to printers of
site B *outside* terminal services? If yes, then they should
install the printers onto the local workstations *before* starting
a TS session, and use normal printer redirection. If not, there's
no easy way to solve this (unless you can install all printers on
the TS itself).

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
RDS troubleshooting:
*----------- Please reply in newsgroup -------------*

=?Utf-8?B?amRyb2dlcjI=?= <jdroger2@discussions.microsoft.com>
wrote on 21 aug 2009:
<!--coloro:blue--><span style="color:blue <!--/coloro-->
> We need a way to automate this as we cannot expect our users to
> do this every time they connect to the TS. I agree that adding
> the permissions to the printer is the right way to resolve this,
> I just need a way to implement it that does not require user
> involvement.
>
> "ahacigu" wrote:
> <!--coloro:green--><span style="color:green <!--/coloro-->
>>
>> l-services-easy-print-part-2.aspx
>>
>> "The users can change access to the printers by editing the
>> permissions in the printer properties to be made accessible to
>> other users."
>>
>> "jdroger2" wrote:
>> <!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>> > We are looking for a way to share access to the local
>> > workstation printers at remote locations on our Terminal
>> > Server. For instance, we have Site A and Site B, and the
>> > Terminal Server locatedat a main office. We would like for
>> > users logged in from Site A to be able to print to the
>> > Printer at Site B and vice versa. We know that users that
>> > are members of Domain Admins can do this, but for data
>> > security reasons we cannot allow the users to have that
>> > group membership, and without it, the users do not have
>> > sufficient permissions to interact with printers from another
>> > user's terminal services session, so we are looking for a
>> > script or setting to add permissions to a printer when it is
>> > brought into a terminal services session.
>> >
>> > Thanks,
>> > Matt<!--colorc--><!--/colorc--><!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->