Turn off printer views from other user sessions

When users log onto their TS sessions; when they want to print (an email, a word document, an excel spreadsheet.. whatever) ... they get to see a list of printers for ALL Users from ALL sessions; how can I turn this off so they only see LOCAL-TS printers and their own local printers on their session?

these are all USERS, not power-users, administrators, etc.
LVL 2
Corcoran SmithAsked:
Who is Participating?
 
t_swartzCommented:
Are the printers installed locally on the term server, or are you talking about all users seeing all other users session printers? If the users are seeing all the locally installed printers (non session printers) then your TS is behaving normally, you will have to adjust permissions on those local printers to control what shows or not. If they are seeing session printers, then they are admins on the TS (or they are members of a domain group that has been given admin rights on the ts), or have been given rights on some reg keys, and directories not normally present.
0
 
Corcoran SmithAuthor Commented:
T_

I mean all users 'seeing all other users session printers'.

corcoran
0
 
t_swartzCommented:
A few other questions, what OS, windows 2000 or 2k3? Service packs/patching up to date? Using Citirx? Can users actually print to any printer they want, or just see them? There is an Office bug, described here http://support.citrix.com/article/CTX668903 that says basically you will see printers for all sessions when you try and print from excel, but you won't be able to print to them due to permissions (on other users' session printers). Because most office apps use mostly the the same printer function, it may appear in multiple office apps, not just excel. The problem described in the citrix article is not limited to just citrix servers, but nt4/2000 term servers. BTW, Citrix has alot of good infor on terminal services troubleshooting as their product depends on TS working correctly. Also, the article mentions user permissions and group membership, as in maybe your term server users are getting power user/admin rights via a group membership that you may not be aware of.
0
Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
Corcoran SmithAuthor Commented:
T: win2k3, TS.
they can just SEE the printers -- I just want each user to be able to see the 'Local' server printers and their own TS'ed connections -- and NOT 40 or so 'printer HP xx from session xx'.  it's weird that they can.

no one is a power-user or a DA unless this behaviour is by design -- thus they need to print to printers, so can therefore see all available printers to print to.  i'm just surprised that there's not a TS option to not allow users to see other TS connections.
0
 
t_swartzCommented:
The behavior you describe isn't by design, normal users on a ts (by default, those users you assign to the local terminal servers' remote desktop users security group) should only see local printers (that they have permissions to) and their own sessions printers. Other users' session printers are not normally visible to normal users. In the past, I have had users actually edit the permissions on their session printers to include normal users, or, worse, share out their session printers. You may want to check the permissions on the windows/systems32/spools/printers directory, do users (remote desktop users) have more permissions than power users? I'm grasping a bit here. As a test, create a normal local user on the term server, add them to that local remote desktop users group, and see if this problem displays for that new user. This will take to domain permissions out of the mix for now and maybe narrow focus a bit.
0
 
Corcoran SmithAuthor Commented:
TS: I've relooked at this by creating a new 'dumb' user and didn't have this issue. but THEN I checked on a bunch of users and the main user that's whinging is actually the delegated site IT admin; thus he has raised priveleges! so i took them off.

love it when users tell you that ALL users are having the issue. genius.
0
 
t_swartzCommented:
I'm sure it isn't the first time that you recieved incomplete/innacurate information, glad you got it worked out.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.