Question : Printer sharing on Windows domain.

Is there a proper (best practice) way to share LAN printers in a Windows AD domain?

I have setup a Windows 2008 AD domain server and several LAN printers on this AD server.

I have granted users full access to these printers, however as we have color laserjet 4005, the default settings is to print in greyscale. If all users have access to the printers, will someone be able to overwrite thie default settings and change all printouts to color for everyone?

How do I share printers on the AD servers but not allow users to make global printer settings changes?

User PCs are Win XP Pro x64 SP3, Win XP Pro SP3, Win 7 Pro x64. And we have HP 4515, 4005, 4345, 2605.

Thanks.

Answer : Printer sharing on Windows domain.

Best practice generally if you dont want people to change your printer settings is to have the Everyone security group set as per the image i've attached.  This will allow them to cancel jobs etc if required, and they will be able to print in colour if needed, but will have to change that setting each time they want to print, as the change wont be saved to the server.

If that's too much hassle for the users (and i know it can be for some) then you could always install and share 2 instances of the printer, 1 printer set with colour settings and the other with B&W.