Brandon81
asked on
Restrict Terminal Services Client Printer Redirection on Per User/Computer basis?
We use a 2003 terminal server here with about 20 people connecting at any one time. For each person, terminal services automatically redirects the local printers on their local pc and creates temporary printer icons on the terminal server. This gets crazy. With about twenty people connected with three printers each, thats like 60 printer icons in control panel.
I found a group policy called "Do not Allow Client Printer Redirectoin," but I can't seem to get it to work on a per-user or per-computer basis. It either bans everyone from printing completely, or nobody at all. I tried explicitly denying the 'apply group policy' permission on certain user/computer accounts with no luck. It still applies the policy and they can't print. Im thinking now that the poilicy is actually applying to the terminal server and not the clients. This would explain the 'deny apply group policy' not working.
Do you know if there is any solution for this? I just want maybe 2 or 3 people to be able to redirect, and everyone else denied. I'd rather not resort to hard-setting their remote desktop connection options on each and every PC.
I found a group policy called "Do not Allow Client Printer Redirectoin," but I can't seem to get it to work on a per-user or per-computer basis. It either bans everyone from printing completely, or nobody at all. I tried explicitly denying the 'apply group policy' permission on certain user/computer accounts with no luck. It still applies the policy and they can't print. Im thinking now that the poilicy is actually applying to the terminal server and not the clients. This would explain the 'deny apply group policy' not working.
Do you know if there is any solution for this? I just want maybe 2 or 3 people to be able to redirect, and everyone else denied. I'd rather not resort to hard-setting their remote desktop connection options on each and every PC.
You can create two .rdp files, one with the printer redirection enabled, one disabled; then deploy the files accordingly to the users.
Hi Brandon81,
you may also be hitting the wrong policy, put that above setting in a clean policy
you may also be hitting the wrong policy, put that above setting in a clean policy
ASKER
Can anyone actually confirm that the policy "Do not Allow Client Printer Redirectoin" actually CAN be be filtered on a per user/computer basis?
any policy setting can be filtered as the policy itself gets filtered, not the individual setting
ASKER
I discovered my own solution.
If you go into active directory you can modify the user properties and restrict printer redirection on a per-user basis. Go to user - properties - environment tab. Select or deslect allow printer redirection.
This setting will override whatever is configured on the client's remote desktop connection options. Just make sure that in terminal services configuration the properties of the RDP connection within the permissions tab are set to obtain setting from user settings.
If you go into active directory you can modify the user properties and restrict printer redirection on a per-user basis. Go to user - properties - environment tab. Select or deslect allow printer redirection.
This setting will override whatever is configured on the client's remote desktop connection options. Just make sure that in terminal services configuration the properties of the RDP connection within the permissions tab are set to obtain setting from user settings.
excellent, another little "loop" within ms settings!
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.