Solved

Q: Regarding  Printing Restriction through Active Directory

Posted on 2004-10-13
5
296 Views
Last Modified: 2008-05-30
If I have all of my networks printers listed in active directory, will it be possible to restrict which users or groups can print to and when they can print to specific printers through group policies??



0
Comment
Question by:Brian_Blair
  • 3
5 Comments
 
LVL 18

Expert Comment

by:luv2smile
ID: 12298985
I don't know of a way to do this in group policy, but you can set NTFS permissions on each printer to set access rights for users/group. You can also set the time you want the printer to be available with the advanced option of the properties window. But I'm not sure if there is a way to allow certain groups to only print at certain times
0
 
LVL 3

Assisted Solution

by:happythedog
happythedog earned 250 total points
ID: 12300093
go to the printer properties page highlight the printer in question right click go to properties under advanced change always to available from and then set the time you wish it to be able to be used , next go to security remove ALL but administrators and add the groups you wish to be able to
print , ticking permit or deny for each option listed
0
 
LVL 3

Assisted Solution

by:happythedog
happythedog earned 250 total points
ID: 12300246
the easiest way to do this as a policy is to make a printing OU and add users with print rights to it. simply take everyone without rights  out of the list and implict deny kicks in, make this OU at the domain controller , depending how granulated you wish to be you can assign certain users to a certain printer and by the use of romaing profiles all of the users documents will print to a single printer no matter where it iwas printed from
can also elevate printers so a certain printer is olny used if the primary printer is offline. you also might want to set the admin to have auditing rights so the administrators can tell who printed what where when its all in the advanced printer settings.
This is by far the most secure and easiest method.

0
 

Author Comment

by:Brian_Blair
ID: 12301317
happy- Can you clarify a little for me? I'm not sure what you mean by a printing OU.
0
 
LVL 3

Accepted Solution

by:
happythedog earned 250 total points
ID: 12301824
make an orgaizational unit add olny printers to this unit, this should allow you to get all the printers in your domain togetheron a single screen so you can administer all at the same sime
then you set which users have rights to  and which dont.
Note , that the OU just says permit deny, the printer properites are more granular
further restrict printing access to a certain printer my hightlighting it and goind to properties advanced and setting the groups that have access ,
and what is listed in that menu , device settings might be a good thing to impose , i would increase memory to 3000kb in device seetings to possibily higher if jobs get dropped.
http://www.samspublishing.com/articles/article.asp?p=98126&seqNum=1 , this explains the organizational unit concept better than i could through text.
wouldnt go higher than domain controller the propagation issues   becomes too great
0

Featured Post

Networking for the Cloud Era

Join Microsoft and Riverbed for a discussion and demonstration of enhancements to SteelConnect:
-One-click orchestration and cloud connectivity in Azure environments
-Tight integration of SD-WAN and WAN optimization capabilities
-Scalability and resiliency equal to a data center

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
I had an issue with InstallShield not being able to use Computer Browser service on Windows Server 2012. Here is the solution I found.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question