Power Users see all session printers from other Terminal Server sessions.
(Last modified: 19Apr2006)
This document (10100949) is provided subject to the disclaimer at the end of this document.
fact
Novell iPrint
Microsoft Windows Server 2003 Enterprise Edition Terminal Server
Microsoft Windows Server 2003 Standard Edition Terminal Server
symptom
Power Users see all session printers from other Terminal Server sessions.
As more people login, they see more session printers.
Those printers show up as duplicates because many of the users that login have iPrint printers on their workstations.
When an Administrator user logs in, they see all these session printers.
When a Print Operator logs in, they see all of the session printers.
When a regular user logs into the Terminal Server, they just see the printers that are installed on the terminal server and their own iPrint printers.
fix
This is working as designed. Microsoft has a feature in Terminal Services that allows Power Users and Administrators to see ALL of the session printers from the desktop workstations on the actual Terminal Server itself. Session printers in the printers folder show up as:
"<printer-agent-name> on ipp://<dns-name_or_ip-address> from <DESKTOP-NAME> in session xx" where xx indicates the session where the printer is coming from.
In order to not have users see all of the session printers, the Terminal Server administrator needs to do the following items:
1.) Make sure that all of their users are not a member of the "Power Users", "Administrators", or "Print Operator" groups. Make the user a member of the "Users" and "Remote Desktop Users" groups. This step prevents regular users from seeing the session printers from other users that are logged into the Terminal Server.
2.) Login as Administrator, or Administrator equivalent. Go to Start | Programs | Novell iPrint | iPrint Client Settings . You will get a box with several tabs (About, Proxy, Passwords, Tray Icon, etc.). Click on the "Terminal Services" tab. Make sure the button for "Install user printers only" is selected and then click on "OK". (NOTE: If you don't see the "Terminal Services" tab, you are not logged in as an Administrator or Administrator equivalent, or you are running an old iPrint client. This document was written with iPrint client version 4.16 running on the Windows 2003 Terminal Server.) What this step does is it installs the Terminal Server printers into the HKCU portion of the registry instead of HKLM. Printers that are installed into HKLM are workstation printers and can be viewed by anyone who connects to the Terminal Server. So if a user installs five user printers (those that are stored in HKCU) on the Terminal Server, they only see their five printers on the server. They do not see the other printers that other users have installed onto the Terminal Server.
3.) (Optional) If the administrator selected "Install workstation printers only (no admin rights required)" and users have installed several printers, go and delete all of those workstation printers. If you have printers that you want installed as workstation printers (everyone prints to one or two printers), then you can disregard this step.
Once the above three steps have been taken, the user experience will be that they will only see the printers that they have installed onto the terminal server, any printers that the Terminal Server Administrator may have added as a workstation printer, and their own iPrint session printers being redirected from their own workstation.
document
| Document Title: | Power Users see all session printers from other Terminal Server sessions. |
| Document ID: | 10100949 |
| Solution ID: | NOVL105715 |
| Creation Date: | 19Apr2006 |
| Modified Date: | 19Apr2006 |
| Novell Product Class: | Novell Printing Services |
disclaimer
The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information.
Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.