As you saw in the previous recipe, Reporting on printer security, the DACL
for a printer defines what access Windows allows to the printer. To change the set of permissions, you need to change the DACL
. You could, for example, update the DACL
on the Sales Group
printer to just allow members of the Sales Group
to print on the printer. This recipe updates the DACL
to enable the AD Sales Group
to print to the Sales Group
printer.
Before you can run this recipe, you need to create a group in the AD. In this recipe, you use a group, Sales Group
, contained in the Sales
OU. To create the OU
, the domain local group, do the following:
# Creating the OU and Group$SB = { New-ADOrganizationalUnit -Name 'Sales' -Path 'DC=Reskit,DC=Org' New-ADGroup -Name 'Sales Group' -Path 'OU=Sales,DC=Reskit,DC=Org' -GroupScope DomainLocal}Invoke-Command -ComputerName DC1 -ScriptBlock $SB