Electronic Office
asked on
How to allow printer redirection only by certain users on a server
I've been puzzling over this for a while. I have a client running Windows Server 2008. They have a terminal server that many of the users connect to. At one time we allowed printer redirection, but we had endless trouble with individual printer settings being misconfigured. Users would call complaining that the prescription printer was printing on the wrong side of the paper, and it would turn out they were using some misconfigured redirected printer. Our solution was to disallow printer redirection via group policy.
Unfortunately, we also have several users that work from home that can only print to their local printers if printer redirection is allowed.
The problem I face is that because the policy is computer based, I cannot direct it only at certain users. I have tried tweaking the delegation portion of the policy by user, but evidently this in ineffective: the computer based policy has nothing to do with the user logging in.
There does not seem to be a user based policy to prevent printer redirection.
The best idea I have come up with is to delete all rdp shortcuts on the desktops of the users via script and replace them with shortcuts that have local resources enabled or disabled depending on the situation, but this seems like an inelegant solution that is going to generate still more phone calls. Any suggestions?
Unfortunately, we also have several users that work from home that can only print to their local printers if printer redirection is allowed.
The problem I face is that because the policy is computer based, I cannot direct it only at certain users. I have tried tweaking the delegation portion of the policy by user, but evidently this in ineffective: the computer based policy has nothing to do with the user logging in.
There does not seem to be a user based policy to prevent printer redirection.
The best idea I have come up with is to delete all rdp shortcuts on the desktops of the users via script and replace them with shortcuts that have local resources enabled or disabled depending on the situation, but this seems like an inelegant solution that is going to generate still more phone calls. Any suggestions?
Davis McCarn
Either use the rdp shortcut idea (which I like because it is simple; especially if one is named <server>-No-Printer-Redir)
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.