Printer access security

[Guest Januar]

Hi,

I have a HQ where the Terminal service server is deployed. The server is

Windows Server 2003 R2 and the clients are Windows XP. We do not deploy VPN

between sites. For some reasons a domain is not created so it is a non-DC

server.

 

There is a user at a remote office (let's call it UserA) who has a directly

connected local printer. Another remote office has a user called UserB. When

UserA connects to the Terminal Service, he can print to the local printer. We

setup this by connecting the local resources and adding a printer driver on

the server.

 

Now, UserB wants to use UserA's printer, but he cannot see the printer. Both

users are normal users. If I add UserB into the PowerUsers or administrators

group he can see the printers, but adding power users/administrator could

compromise the security.

 

Other way is to edit the security setting of the printer (provided the UserA

has logged in) by adding Users group to allow to print, but once UserA logs

off and logs in again, the security setting of the printer will reset back.

 

Any idea on how to resolve this issue?

 

Cheers,