Modifying printer security

As you saw in the previous recipe, Reporting on printer security, the DACL for a printer defines what access Windows allows to the printer. To change the set of permissions, you need to change the DACL. You could, for example, update the DACL on the Sales Group printer to just allow members of the Sales Group to print on the printer. This recipe updates the DACL to enable the AD Sales Group to print to the Sales Group printer.

Getting ready

Before you can run this recipe, you need to create a group in the AD. In this recipe, you use a group, Sales Group, contained in the Sales OU. To create the OU, the domain local group, do the following:

    # Creating the OU and Group
    $SB = { New-ADOrganizationalUnit...