Solved

Q: Regarding  Printing Restriction through Active Directory

Posted on 2004-10-13
5
294 Views
Last Modified: 2008-05-30
If I have all of my networks printers listed in active directory, will it be possible to restrict which users or groups can print to and when they can print to specific printers through group policies??



0
Comment
Question by:Brian_Blair
  • 3
5 Comments
 
LVL 18

Expert Comment

by:luv2smile
ID: 12298985
I don't know of a way to do this in group policy, but you can set NTFS permissions on each printer to set access rights for users/group. You can also set the time you want the printer to be available with the advanced option of the properties window. But I'm not sure if there is a way to allow certain groups to only print at certain times
0
 
LVL 3

Assisted Solution

by:happythedog
happythedog earned 250 total points
ID: 12300093
go to the printer properties page highlight the printer in question right click go to properties under advanced change always to available from and then set the time you wish it to be able to be used , next go to security remove ALL but administrators and add the groups you wish to be able to
print , ticking permit or deny for each option listed
0
 
LVL 3

Assisted Solution

by:happythedog
happythedog earned 250 total points
ID: 12300246
the easiest way to do this as a policy is to make a printing OU and add users with print rights to it. simply take everyone without rights  out of the list and implict deny kicks in, make this OU at the domain controller , depending how granulated you wish to be you can assign certain users to a certain printer and by the use of romaing profiles all of the users documents will print to a single printer no matter where it iwas printed from
can also elevate printers so a certain printer is olny used if the primary printer is offline. you also might want to set the admin to have auditing rights so the administrators can tell who printed what where when its all in the advanced printer settings.
This is by far the most secure and easiest method.

0
 

Author Comment

by:Brian_Blair
ID: 12301317
happy- Can you clarify a little for me? I'm not sure what you mean by a printing OU.
0
 
LVL 3

Accepted Solution

by:
happythedog earned 250 total points
ID: 12301824
make an orgaizational unit add olny printers to this unit, this should allow you to get all the printers in your domain togetheron a single screen so you can administer all at the same sime
then you set which users have rights to  and which dont.
Note , that the OU just says permit deny, the printer properites are more granular
further restrict printing access to a certain printer my hightlighting it and goind to properties advanced and setting the groups that have access ,
and what is listed in that menu , device settings might be a good thing to impose , i would increase memory to 3000kb in device seetings to possibily higher if jobs get dropped.
http://www.samspublishing.com/articles/article.asp?p=98126&seqNum=1 , this explains the organizational unit concept better than i could through text.
wouldnt go higher than domain controller the propagation issues   becomes too great
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Internet Service Provider 3 51
GPO Central Store 3 25
Additional DC vs Child Domain 12 23
How to set only one user access in one machine in windows 3 23
Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
When you try to share a printer , you may receive one of the following error messages. Error message when you use the Add Printer Wizard to share a printer: Windows could not share your printer. Operation could not be completed (Error 0x000006…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question