Restricting access to network printers

We have multiple printers connected directly to the network. All the client machines are on Windows 7, which in turn has the print queues installed on them.

Is there a simple way to allow only select Active Directory users to print to a networked printer? Or maybe setting up an admin user and password to limit direct access to the network printers?

I have access to the print server (Windows 2008)

Who is Participating?
venkatspbSenior Software EngineerCommented:
Give print access to Domain users. Full control to Administrators. For denying access to specific users create a group in ad like print_deny and add the users to print_deny and give deny permission from security tab.

Attached the screenshot for your reference.
Swapnil PrajapatiSr. System AdministratorCommented:
You can make a security group and allow the users which needed to print on particular printer and remove everyone.
helpfinderIT ConsultantCommented:
what if you set users (gorups) who should be able to connect the printer on Security tab on each printer?
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Add or remove users in security tab on printer on server. Or deny permission
Swapnil PrajapatiSr. System AdministratorCommented:
that will also do.
Miguel Angel Perez MuñozCommented:
Sorry but, if all printers are in same network segment than computers, anybody can install locally every printer and use them bypassing server configuration.
Only real solution is:
Isolate all printers in separate vlan or network.
Use a print server to print, with one ethernet card on clients net and other one on printers net.
Spike99On-Site IT TechnicianCommented:
Drashiel, I disagree:  Only administrators can discover & install printers on Windows 7 using the IP address.

Other users can only install printers shared off a server or another PC.  When a user goes through the process to add a "network printer," they will only see the printers they have rights to see. So, using a group to secure the printers will restrict printer access effectively.

In Windows 7, users can add a printer manually by using the IP if they know what it is, but the typical user doesn't know how to do that.  That, in combination with the fact that a user would be unable to install the print driver for the IP printer, is a pretty effective barrier preventing most users from adding printers they don't have rights to.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.