icolas Blank [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, May 12, 2004 8:10 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [ActiveDir] dc print server security
>
> Services may be ACL'd directly, just like files, AD objects, etc.
> You can use subinacl.exe from win2k3 & win2k r
If the print queues in question are on the DCs then you could use the
default domain controller policy to ACL them. Otherwise, you can use
subinacl to set the permissions.
I will take a guess at why MS doesn't delegate that by default but could be
entirely wrong as it is my opinion... You could t
Services may be ACL'd directly, just like files, AD objects, etc.
You can use subinacl.exe from win2k3 & win2k res kit
http://www.microsoft.com/downloads/details.aspx?familyid=9d467a69-57ff-4
ae7-96ee-b18c4790cffd&displaylang=en
to achieve this.
You can delegate the following rights on a service:
