Keep users of shared printer from seeing what others send to the same printer

Posted on 2012-08-23
Last Modified: 2012-11-03
We are using shared printers from a 2008R2 print server, and would like for our users to not be able to see what other users pass to the print queue.

Today any user that has the print queue window open, can see the file- and username of print jobs being passed to the printer.
In a student environment this is not very desirable.

Any ideas how to prevent everyone from seeing all other users' print job information?

Question by:itavdelingen
    LVL 20

    Accepted Solution

    This is "Print Management Step-by-Step Guide for Windows Server 2008"
    but there is no specific reference to your request, or I do not see it.

    Using an external software seems possible:
    LVL 20

    Assisted Solution

    Somebody else gave the next answer here:

    It is impossible and the solution is not achievable in a single print queue. Also, please note that if users can print to the queue, then they can see the contents of the queue. If users have no access to a print queue, then they won’t even see the queue.
    Please refer to the following suggestions as workaround.

    1. Creating a print queue for each user (or set of users), with permissions only for that user/users.
    2. Monitoring job submission (via FindNextPrinterChangeNotification) and changing the document name to something generic. This still leaves a small window where the 'real' name is visible.
    LVL 19

    Assisted Solution

    In our student environment we use a separate printserver (not connected to a domain) to handle our printing. We have Pcounter ( installed on this server, for accounting and direct-pay purposes.

    In our setup we've disabled direct connections (SMB) to this server, but have made it accessible through the LPD protocol. This setup has the advantage that anyone can print to the printer (the pcounter program tags a printjob with a username and password) and additional printjobs aren't visible anymore once they are submitted to the queue.

    If you leave out the pcounter (but you'll probably have some other accounting mechanism for your students) just create a setup with LPD on the server and clients.

    The downside of this setup is that you must install LPD/LPR (Add/remove programs - Windows Components - Other Network file and print services - Print services for Unix) on your server and clients, and that you have to install a Local printer on your clients. (the settings of which cannot be centrally managed)
    LVL 19

    Expert Comment


    Did you have a chance to try the LPD route?
    (Install Print services for Unix on your server and clients, configure a local printer on the client that prints to the LPD queue on the server)
    LVL 37

    Expert Comment

    This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.

    Featured Post

    Free book by J.Peter Bruzzese, Microsoft MVP

    Are you using Office 365? Trying to set up email signatures but you’re struggling with transport rules and connectors? Let renowned Microsoft MVP J.Peter Bruzzese show you how in this exclusive e-book on Office 365 email signatures. Better yet, it’s free!

    Join & Write a Comment

    Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
    The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
    This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
    This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now