how to hide local workstation printers during login to domain

Is there any policy or command to hide local workstation printers after having login to win server 2008?  Thanks.
riowgAsked:
Who is Participating?
 
GISCOOBYDirector of Information TechnologyCommented:
Are the domain users Local Administrators on these machines? If yes, within the Local Users and Groups add a group for the local users called for example "Allowed Printing" and grant the local machine users rights to this group. Then in the security settings of the printers, remove all accounts (except maybe Domain Admins) and add the newly created local group. This won't prevent the domain user from going in and change the permissions later or viewing that it exists, but it should block it from being used. I am not sure there is a way to effective "hide" the printer from full view when the user is a local admin of the machine.
0
 
SupportonthespotCommented:
are you talking about when you login using Remote desktop to a server it takes your printers over.

If so when you open up the remote desktop connection click options and edit the local devices tab and take the tick out of printers. in a TS environment if everybody takes across these settings you end up with multiple printers you can print to.

I hope this is the right answer for your circumstances
0
 
riowgAuthor Commented:
Sorry, I didn't raise the question clearly.

Is there any group policy or command to hide local workstation printers on XP during XP login to SBS 2008 in the same LAN?  Thanks.
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
riowgAuthor Commented:
added:  not login via RDP or TS
0
 
GISCOOBYDirector of Information TechnologyCommented:
Apply the setting in Group Policy within "Computer Configuration\Policies\Administrative Templates\Printers\Automatically publish new printers in Active Directory" to the XP workstations in question by Disabling this setting. Per Microsoft's GP description "... If you disable this setting, the Add Printer Wizard does not automatically publish printers. However, you can publish shared printers manually..." You will need to manually remove any XP printers already published in SBS 2008. You could also just un-share the printers from XP so they won't even try to publish to the server.
0
 
riowgAuthor Commented:
Hi, I need to keep the local XP printers installed.  They're not shared printers, and they just use locally once the user login locally rather login to the domain.  I need to hide all local printers automatically once user login to the domain.
0
 
riowgAuthor Commented:
sb. continue to reply to the question
0
 
GISCOOBYDirector of Information TechnologyCommented:
This is an additional article in found on EE further describing the delima you face when trying to "hide" a local printer from a local user: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_22854419.html
0
 
riowgAuthor Commented:
Those domain users are not local Administrators but they're all just local Users.  This is mainly to hide all local printers from them when they login to domain.  Since I can't find any simple policy to fulfill this, I may turn to see if any scripts mixing with group policy to do the task centrally.  Thanks.
0
 
riowgAuthor Commented:
Thanks for the solution though it's not fit for the environment.  I'm looking for a way to add ACL deny printing to Domain User for local printer.  Would you have any idea?
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.