You have a computer that runs Windows 7 and a locally installed printer that you share on the network. You remove the Everyone group from the printer's access control list (ACL) and then share the printer. You need to ensure that members of the Sales group can submit print jobs and modify or cancel only their own jobs, but cannot modify or cancel print jobs submitted by other users. What should you do?

Introduction / Context:
Windows printer security allows you to control who can print, who can manage printer settings, and who can manage print jobs. Different permissions such as Print, Manage Documents, and Manage Printers give different levels of control. In this scenario, you want users in the Sales group to be able to manage only the print jobs they submit, not those of other users. This requires selecting the correct printer permission.

Given Data / Assumptions:

• The computer runs Windows 7 and hosts a shared printer.
• The Everyone group has been removed from the printer's ACL to tighten security.
• Members of the Sales group should be able to print and manage their own jobs (for example, pause or cancel them).
• Sales group members must not be able to modify or cancel jobs submitted by other users.
• You will configure permissions using the printer's properties dialog.

Concept / Approach:
The Print permission allows users to send documents to the printer and manage their own documents in the print queue. The Manage Documents permission allows users to manage all documents in the queue, including those submitted by others. Group Policy user rights such as "Increase scheduling priority" or "Take ownership" are unrelated to printer queue management. Therefore, the correct solution is to grant the Sales group the Print permission only.

Step-by-Step Solution:
1. Open Devices and Printers, right click the shared printer, and choose Printer properties. 2. Go to the Security tab to view and configure the printer's ACL. 3. Add the Sales group to the list of security principals if it is not already present. 4. Grant the Sales group the Print permission and ensure that Manage Documents and Manage Printers are not selected. 5. Apply the changes. Sales users will now be able to submit jobs and manage their own documents, but not those of other users.

Verification / Alternative check:
You can test the configuration by having two different Sales group users submit print jobs. Each user should be able to pause or cancel their own job but should receive access denied if they try to modify the other user's job. If a user with Manage Documents permission logs on, they should be able to manage all jobs, illustrating the difference between these permission levels.

Why Other Options Are Wrong:
Option b, granting Manage Documents, is incorrect because it grants the ability to manage all documents in the queue, including those created by other users, which violates the requirement. Option c, Increase scheduling priority, is a user right that affects process scheduling and has nothing to do with printer permissions. Option d, Take ownership of files or other objects, is a powerful file system and object permission that is unrelated to the specific print queue management scenario.

Common Pitfalls:
A common mistake is to grant more permission than necessary, such as Manage Documents, simply to solve a temporary problem. This can lead to users cancelling or altering other people's print jobs by accident or misuse. Another pitfall is confusing printer permissions with file system permissions or local security policy settings, when in fact the needed control is available directly on the printer object.

Final Answer:
You should assign the Print permission to the Sales group on the printer so that members can manage only their own print jobs and not the jobs of others.