Full Control Permissions Are Granted to All Users When a Single User's Fax Permissions Are Revoked (218026)



The information in this article applies to:

  • Microsoft BackOffice Small Business Server 4.0
  • Microsoft BackOffice Small Business Server 4.0a
  • Microsoft BackOffice Small Business Server 4.5

This article was previously published under Q218026

SYMPTOMS

When you use a BackOffice Small Business Server (SBS) wizard to revoke a user's fax permissions, Full Control permissions are granted to all other users.

CAUSE

This behavior occurs when you use the SBS Control User Access to Fax Printers Wizard to set fax printer permissions. When you use this wizard to remove a user's access to the fax printer, it removes the Everyone group and grants all users Full Control permissions.

RESOLUTION

To resolve this issue, perform the following steps:
  1. Click Start, point to Settings, click Control Panel, and then click Fax Server.
  2. Click the Send tab.
  3. Click Delete to remove the fax printer.
  4. Click Add to add the fax printer.
  5. Double-click Printers.
  6. Click the fax printer.
  7. Click Properties.
  8. Click the Security tab.
  9. Click Permissions, and then verify that default permissions are restored. The default fax printer permissions are:

       Administrator      Full Control
       Creator Owner      Manage Document
       Everyone           Print
       Print Operators    Full Control
       Server Operators   Full Control
    						
NOTE: If you perform the above procedure, fax printer permissions are also restored to the user whose privileges were previously removed. It is impossible to use the SBS Wizard to remove a user's permissions to the fax printer and maintain proper permissions for the fax printer. If you want to deny a specific user permissions to the printer and maintain default permissions for all other users:

  1. Click Start, point to Settings, click Control Panel, and then double-click Printers.
  2. Right-click Fax Printer, and then click Properties.
  3. On the Security tab, click Permissions.
  4. Click Add.
  5. Select the user from the list.
  6. In the box at the bottom of the window, set the access type to No Access.
  7. Click OK, and then close Fax Printer properties.
The user whose permissions you set to No Access is unable to connect to the fax printer, and all other users still have print access.

STATUS

Microsoft has confirmed that this is a problem in BackOffice Small Business Server 4.0, 4.0a, and 4.5.

Modification Type:MajorLast Reviewed:10/27/2003
Keywords:kbbug kbpending KB218026