Powershell PermissionSDDL

Question

I used this powershell to add a security group call ''GRADM'' set on my printer ''IMP00107'' to all of my print servers which will set the group to have the Manage Documents permission but when I run the script security group is created and ather existing group in the printers are overwrited. Is it the way to add group ''GRADM'' and keep existing Group ?

$Printserver = "ps01"
$printsecurity = get-printer -computer $Printserver "IMP00107" -full

get-printer Printer002 -computer $Printserver | Foreach-Object {
set-printer $_.name -computer $Printserver -PermissionSDDL $printsecurity.PermissionSDDL
}

Answer 1

Hello there,

If you want your existing security groups to be merged with the new security groups then you must create a nested group. You can add an existing Security Group to another Security group (also known as nested groups), creating a member group (subgroup) and a parent group. The member group inherits the attributes and properties of the parent group, saving you configuration time.

You can use Add-ADGroupMember to add a group to another group. Here's the syntax:

http://technet.microsoft.com/en-us/library/ee617210.aspx

Manage Azure Active Directory groups and group membership https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/how-to-manage-groups

--------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept it as an answer–

Answer 2

How are you adding the ACE for the group "GRADM" to the printer's SDDL?

Answer 3

I created group ''GRADM'' with AD, I added the group in one of my printer ''IM00107'' after that I used the script to add that group with all PermissionSDDL(ACL) to all my others printers. The way is the script add the group on all printers but other existing groups are deleted