Printing best Solution and security best practise

All our network printers not on the print server . Due to that reason some times users can connect into the wrong printers and sending here and there . I did not manage to find the best way to block the normal users connecting to the network printer and doing  printing . In most of the cases users did not have access to  connect and do the printing unless administrator setup  . But there are some cases where user has access to connect into printers incase of same printer driver installed his/her PC . he can connect in to the second and the third printers receptivity / how can I avoid this situation
curAsked:
Who is Participating?
 
hdhondtCommented:
On reflection, can I assume you mean a "high availability" print server or cluster? In that case my comments about servers still apply. HA would not add anything to that, except making sure it is more readily available. This is especially true if you employ a cluster, as in such a setup one machine can take over if another fails. See, for example, https://technet.microsoft.com/en-us/library/dd197602(v=ws.10).aspx  and https://www.microsoft.com/en-us/download/details.aspx?id=29026 .
0
 
hdhondtCommented:
It depends on the size of your organisation: the number of PCs and printers involved. It also depends on how much control the admin wants.

For large organisations, using a server is the best way to go. The server can control access to any or all printers. Users only have access to those printers they're allowed to use. If you want to make sure nobody connects directly to the printer, most printers let you set up an "access list". This is a list of the IP addresses that the printer will accept connections from. If you put only the print server in the list, everyone else is locked out, and all users have to connect via the server.

For small organisations (say less than 50 people), it's may be preferable to give everyone direct access to the printers - but again it depends on the admin's requirements. It does make it easy for each user to do things like setting up a second copy of a driver which defaults to mono (for a colour printer). With a print server, that mono driver needs to be created on the server, which means delays until IT get around to it.
0
 
curAuthor Commented:
thanks you for your  positive comment on the ACL and the other information . issue is some of the old printers doesn't have ACL . even I did not find in HP 401 . other thing is user can connect in to the similar driver with different printer purposely or accidently . for that any solution ?
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

 
hdhondtCommented:
You are correct: not all printers support an ACL. However, according to the data sheet, the Laserjet 401does

If it doesn't, there is no simple way to prevent people from printing direct to the printer. I would say that those printers are not suitable for large organisations.

other thing is user can connect in to the similar driver with different printer purposely or accidently
I do not quite understand what you are trying to say.

If you mean that a local driver can be set up for a completely different printer, just by changing the IP address for the printer, then yes, that is possible, and there is no solution for it - except to print via a server, and to limit users' permissions. If users can install and modify any printer driver, there is nothing to stop them from installing a driver for printer A, and pointing it to printer B's IP address.

If that is not what you meant, can you please clarify?
0
 
curAuthor Commented:
you are absolutely correct , but I don't think we can control the permission to block the normal user to block the ini file in the second time to select . with my knowledge , only the first time user need to run the driver exe . in most of the cases admin user will run the driver in the local PC . so that we have no way to block that
0
 
hdhondtCommented:
With most drivers, the user never needs to run an exe file. Just point the printer wizard at the ini file.
0
 
curAuthor Commented:
What is the best way to handle the printing   in the large setup
0
 
hdhondtCommented:
As I said in my first post, for large organisations, using a server is the best way to go.
0
 
curAuthor Commented:
In that way I have look at the HA as well
0
 
hdhondtCommented:
Sorry cur, but what do you mean by "HA"?
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.