+ Post New Thread
Results 1 to 4 of 4
Hardware Thread, Deny printing in Technical; Question: What would be the best way to deny printing to a particular printer, from a particular workstation and username. ...
  1. #1

    Join Date
    Oct 2011
    Thank Post
    Thanked 0 Times in 0 Posts
    Rep Power

    Deny printing

    Question: What would be the best way to deny printing to a particular printer, from a particular workstation and username.

    E.g. Deny user 'Jon' to print from workstation 'PC-01' to printer 'Printer-01'

    Could this be done via a GPO, security settings via the security tab on printer in question, or by a script? We are a college and also use the print management software PaperCut NG.

    We essentially have workstations in an open access area with printing facilities, but wish to deny a particular user to print from those workstations to the open access printer. However, I wish for this user to print from the classroom workstations to the open access printer.

    Unfortunately, moving workstations or creating another user account is not an option.

    Any help is greatly appreciated.


  2. #2

    nephilim's Avatar
    Join Date
    Nov 2008
    Thank Post
    Thanked 2,018 Times in 1,467 Posts
    Blog Entries
    Rep Power
    You should be able to restrict printing by floor/location/room/PC with papercut. You can add a few scripts in to deny or allow printing. Dont run it here but did in the previous establishment of employment, and they had various scripts for various people in various locations.

  3. #3

    Join Date
    Jan 2013
    Thank Post
    Thanked 11 Times in 11 Posts
    Rep Power
    Depending how large your network is - could you not just add the user to the security properties of the printer which you wish not to print, and just deny all? The downside of this is the user is still able to see the printer listed in their printers, and it looks like you can still print, but, it wont.

    EDIT: Or if its larger than 1 user, could you not create a security group with the people who you wish to deny printing and deny the whole group in security settings? Or as above use the printer management software. Something that I have no experience of.

    I had a similar problem, we have 4 photocopiers here, and for some reason some of our machines pick up all of them (which we didnt want), and some only pick up the photocopiers which are told to via GP. As a work around I deny'd the user which I didnt want to print as above. In the end I just set up a GP to remove the unwanted printers and attached it to the OU they were in
    Last edited by cooka; 28th January 2014 at 08:59 AM.

  4. #4

    sparkeh's Avatar
    Join Date
    May 2007
    Thank Post
    Thanked 1,771 Times in 1,193 Posts
    Blog Entries
    Rep Power
    Got a couple of ideas.
    1. If you use GPPs to deploy printers just use Item Level Targeting to ensure that user doesn't get the printer added.
    2. Create a group in AD called 'Printing denied' and add the user to it, sycn with PaperCut and add a script like this to the printer (not tested by the way but should be something like this):

    function printJobHook(inputs, actions) {
    // Test if a user is in group called 'Printing denied' and the if the machine name belongs to a restricted machine, if so cancel and log.
    if (inputs.user.isInGroup("Printing denied")) {
    if (inputs.job.clientMachineOrIP("<YOUR_MACHINE_NAME>")){
    actions.log.debug('Job from user "' + inputs.user.username + '" was canceled.');
    Using PaperCut is probably the better option as there is no way round it, if that user A sends a print job from machine B then its denied, no question.
    Last edited by sparkeh; 28th January 2014 at 09:36 AM.

+ Post New Thread

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts