OK, given those three groups, what printers are ACL'd to each and are you prepared to maintain an INI file mapping the relationship of group to printer?
If you are not prepared to manage an INI file then things get way more complicated in your script as every user would have to trawl through every printer's ACEs.
How many printers/groups/users are we talking about? You could write an admin script that builds/maintains the INI file so that the users would not have to do so much heavy lifting.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
