prevent not domain users from accessing network printer

I have a network Printer .. and it shared and added to the domain users by print server (windows server ) the problem is how to prevent someone not domain joined and has the printer IP from adding this printer and printing?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Network Engineer
Commented:
Firewall the printer to prevent access to it except from the print server. This would generally involve a firewall, router, or L3 switch that can use ACLs to limit traffic.

Why are non-domain joined devices allowed on the network? That should be looked at IMHO. I use 802.1x wired authentication to prevent non-domain devices from the wired network. WPA2-Enterprise also uses 802.1x with the same result of keeping non-domain devices off the network.

Printers should be considered insecure IOT devices and deserve to the firewalled off from the rest of the network regardless of whether or not you have non-domain devices on the network.

Author

Commented:
Thank you very much for help :)

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial