Restricting access to network printers

Posted on 2012-08-28
Medium Priority
Last Modified: 2012-09-19
We have multiple printers connected directly to the network. All the client machines are on Windows 7, which in turn has the print queues installed on them.

Is there a simple way to allow only select Active Directory users to print to a networked printer? Or maybe setting up an admin user and password to limit direct access to the network printers?

I have access to the print server (Windows 2008)

Question by:autotrix

Assisted Solution

by:Swapnil Prajapati
Swapnil Prajapati earned 400 total points
ID: 38340302
You can make a security group and allow the users which needed to print on particular printer and remove everyone.
LVL 19

Assisted Solution

helpfinder earned 400 total points
ID: 38340308
what if you set users (gorups) who should be able to connect the printer on Security tab on each printer?
LVL 15

Expert Comment

ID: 38340381
Add or remove users in security tab on printer on server. Or deny permission

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.


Expert Comment

by:Swapnil Prajapati
ID: 38340382
that will also do.

Accepted Solution

venkatspb earned 400 total points
ID: 38340442
Give print access to Domain users. Full control to Administrators. For denying access to specific users create a group in ad like print_deny and add the users to print_deny and give deny permission from security tab.

Attached the screenshot for your reference.
LVL 19

Assisted Solution

by:Miguel Angel Perez Muñoz
Miguel Angel Perez Muñoz earned 400 total points
ID: 38340528
Sorry but, if all printers are in same network segment than computers, anybody can install locally every printer and use them bypassing server configuration.
Only real solution is:
Isolate all printers in separate vlan or network.
Use a print server to print, with one ethernet card on clients net and other one on printers net.
LVL 17

Assisted Solution

Spike99 earned 400 total points
ID: 38346444
Drashiel, I disagree:  Only administrators can discover & install printers on Windows 7 using the IP address.

Other users can only install printers shared off a server or another PC.  When a user goes through the process to add a "network printer," they will only see the printers they have rights to see. So, using a group to secure the printers will restrict printer access effectively.

In Windows 7, users can add a printer manually by using the IP if they know what it is, but the typical user doesn't know how to do that.  That, in combination with the fact that a user would be unable to install the print driver for the IP printer, is a pretty effective barrier preventing most users from adding printers they don't have rights to.

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Here's a look at newsworthy articles and community happenings during the last month.
Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
In a question here at Experts Exchange (https://www.experts-exchange.com/questions/29062564/Adobe-acrobat-reader-DC.html), a member asked how to create a signature in Adobe Acrobat Reader DC (the free Reader product, not the paid, full Acrobat produ…
Suggested Courses

864 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question