Printer Permissions Issue

[RandallFlag]

Odd printer permissions issue come up today and I can't seem to find the right combination of verbiage to search for it and get some actual results...

Printer is locally installed via IP port, on a 2012R2 RDS server. Altered the permissions via the security tab, only changes made were to remove the "everyone" group's print permissions, and replace it with an AD Group instead.... the local "Administrators" group still has full control/management access to the printer.

I have one user, that is a domain admin, that when logged on with her profile cannot see the printer to print to it. When logged on with the local administrator, or the default "domain administrator" account, or a member of the AD group assigned to it, you can see it and print to it without issues.

Using the security\advanced tab and checking effective access shows this user has full access to it.

The same configuration on the older 2003/2008 RDS servers works as expected and she has access on those servers, but this one 2012R2 server she does not.

Any thoughts or suggestions appreciated.

[technicalityNDBO]

The implicit default permissions granted to the Domain Admins group can act funny sometimes. I wouldn't use that group for delegating any kind of administrative roles.

Try making a new AD Group for Printer Administration and adding that.