You are the administrator of a Windows 2000 Server computer named Ezonexam1. A printer named PrinterColor is configured on Ezone

admin2009-05-19  29

问题 You are the administrator of a Windows 2000 Server computer named Ezonexam1. A printer named PrinterColor is configured on Ezonexam1.

You want to allow only users in the Administrators group and users in the Managers group to print to PrinterColor. You also want to allow users in the Managers group to pause and resume their print jobs, and you want to ensure that users in the Administrators group have full control permission for PrinterColor.

What should you do?
To answer, click the Simulation button and then perform the appropriate actions in the simulation of the Printers folder.

选项

答案Answer: 10 steps Step 1. Click Start > Settings > Printers. Step 2. We need to access the Properties of the PrinterColor printer. To do this, select the printer and click the file menu. Step 3. In the File menu, select Properties. Step 4. Click the Security tab. Step 5. The first thing we need to do is to remove the print permissions for the Everyone group and the Power Users group. To remove the print permissions for the Everyone group, select the Everyone group and click the Remove button. Note: We could just clear the ’Allow’ checkboxes, but the Everyone group would still be listed. For ease of administration, it’s better to remove any unneeded groups from the list. Step 6. Now we can repeat step 5 to remove the Power Users Group. Step 7. The next step is to add the Management group to the list. To do this click the Add button. Step 8. We can select the CREATOR OWNER group and verify that it has the Manage Documents permission. Step 9. Click the OK button to close the dialog box. Step 10. Close the Printers folder.

解析 Explanation: By default, the Everyone group and the Power Users group have permission to print to the printer. Therefore, these groups need to be removed from the printer DACL (Discretionary Access Control List). You want the Managers group to use the printer so they will need to be added to the printer DACL. The Managers group must also be able to pause and resume their print jobs. When a user sends a print job to the printer, they become a member of a system group named CREATOR OWNER until the print job has finished.

For a user to be able to pause and resume their print jobs, the CREATOR OWNER group needs the ’Manage Documents’ permission. The ’Manage Documents’ permission, when applied to the CREATOR OWNER group only allows the user to ’manage’ his or her print jobs. If the Management group had the ’Manage Documents’ permission, they would be able to ’manage’ any print job sent to the printer. The following steps outline the procedure:
转载请注明原文地址:https://jikaoti.com/ti/bVO7FFFM
0

最新回复(0)