Restricting access to network printers

Posted on 2012-08-28
Last Modified: 2012-09-19
We have multiple printers connected directly to the network. All the client machines are on Windows 7, which in turn has the print queues installed on them.

Is there a simple way to allow only select Active Directory users to print to a networked printer? Or maybe setting up an admin user and password to limit direct access to the network printers?

I have access to the print server (Windows 2008)

Question by:autotrix
    LVL 5

    Assisted Solution

    You can make a security group and allow the users which needed to print on particular printer and remove everyone.
    LVL 19

    Assisted Solution

    what if you set users (gorups) who should be able to connect the printer on Security tab on each printer?
    LVL 15

    Expert Comment

    Add or remove users in security tab on printer on server. Or deny permission
    LVL 5

    Expert Comment

    that will also do.
    LVL 3

    Accepted Solution

    Give print access to Domain users. Full control to Administrators. For denying access to specific users create a group in ad like print_deny and add the users to print_deny and give deny permission from security tab.

    Attached the screenshot for your reference.
    LVL 19

    Assisted Solution

    by:Miguel Angel Perez Muñoz
    Sorry but, if all printers are in same network segment than computers, anybody can install locally every printer and use them bypassing server configuration.
    Only real solution is:
    Isolate all printers in separate vlan or network.
    Use a print server to print, with one ethernet card on clients net and other one on printers net.
    LVL 16

    Assisted Solution

    Drashiel, I disagree:  Only administrators can discover & install printers on Windows 7 using the IP address.

    Other users can only install printers shared off a server or another PC.  When a user goes through the process to add a "network printer," they will only see the printers they have rights to see. So, using a group to secure the printers will restrict printer access effectively.

    In Windows 7, users can add a printer manually by using the IP if they know what it is, but the typical user doesn't know how to do that.  That, in combination with the fact that a user would be unable to install the print driver for the IP printer, is a pretty effective barrier preventing most users from adding printers they don't have rights to.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Why You Should Analyze Threat Actor TTPs

    After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

    [b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
    First some basics on Windows 7 Backup.  It has 2 components one is a file based backup which is stored in .zip files each zip is split at around 200 Megabytes and there is the Image Backup which is as the name implies a total image of the partition …
    This Micro Tutorial will teach you how to the overview of Microsoft Security Essentials. This is a free anti-virus software that guards your PC against viruses, spyware, worms, and other malicious software. This will be demonstrated using Windows…
    This Micro Tutorial will go in depth within Systems and Security in Windows 7 and will go into detail regarding Action Center, Windows Firewall, System, etc. This will be demonstrated using Windows 7 operating system.

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now