+ Post New Thread
Results 1 to 15 of 15
Windows Server 2008 Thread, Restricting Printing in Technical; Afternoon all, I'm trying to restrict printing to some of our printers. Just to give you the full situation, our ...
  1. #1

    Join Date
    Feb 2007
    Location
    Stockport
    Posts
    882
    Thank Post
    265
    Thanked 113 Times in 85 Posts
    Rep Power
    40

    Restricting Printing

    Afternoon all,

    I'm trying to restrict printing to some of our printers.

    Just to give you the full situation, our school is split into 5 colleges and each college has its own designated IT Suite each with its own mono laser printer which is monitored by PCounter.

    All network printers in school are deployed through Group Policy, and in theory the only PC's which can print to each printer are those which have been allocated it.

    Unfortunately this isn't the case, roaming profiles (for staff) are storing printer mappings and as such staff are printing all over the school to printers in other colleges which is costing the other college's money for toner etc (I know some staff are doing this on purpose!).

    What I'm trying to achieve, as a result, is to properly restrict which PC's can print to each printer. I had hoped to achieve this by editing the security settings on each printer, however if I put in here the pc names of those that I want to be able to print to it, it stops all users from printing until I add the users back in.

    Is there a way in which I can achieve what I'm trying to do?

    Any help anyone can provide will be gratefully received.

  2. #2

    Join Date
    Dec 2008
    Location
    Essex
    Posts
    2,144
    Thank Post
    1
    Thanked 326 Times in 316 Posts
    Rep Power
    77
    Hi

    Are all of your staff split at each site, i.e will staff at college 1 only be located at that college?

    Also, say for example, staff member 1 only allowed to print to their own college site?

    Sukh

  3. #3
    eddyc's Avatar
    Join Date
    Aug 2008
    Location
    Bristol
    Posts
    438
    Thank Post
    99
    Thanked 47 Times in 43 Posts
    Rep Power
    22
    Could you not put something in the logoff script to remove all of the printers attached to the profile and then add the one that they should have back in when they log on?
    That is what we do and seems to work quite well.

  4. Thanks to eddyc from:

    Iain.Faulkner (13th April 2011)

  5. #4

    Join Date
    Feb 2007
    Location
    Stockport
    Posts
    882
    Thank Post
    265
    Thanked 113 Times in 85 Posts
    Rep Power
    40
    Hi all,

    sukh, apologies for not being clear. Our colleges are more like a traditional "House" system, they aren't physical buildings. All our staff are based on the one site.

    ect, I don't suppose I can be cheeky and ask you to post the contents of the script you run?

  6. #5

    Join Date
    Dec 2008
    Location
    Nottingham
    Posts
    575
    Thank Post
    38
    Thanked 115 Times in 105 Posts
    Rep Power
    46
    Could Group Policy Preferences be used - don't know what OS your clients use. We use this for deploying/deleting printers - you can filter based on OU, machine details, all sorts, and set to delete all shared printer connections as one of the preference items (I'd suggest this being 1st one!).

  7. Thanks to Willott from:

    Iain.Faulkner (13th April 2011)

  8. #6

    Join Date
    Feb 2007
    Location
    Stockport
    Posts
    882
    Thank Post
    265
    Thanked 113 Times in 85 Posts
    Rep Power
    40
    We're Windows 7 across the board, thanks for that though I'll take a look and see if that will work.

  9. #7

    Join Date
    Dec 2008
    Location
    Nottingham
    Posts
    575
    Thank Post
    38
    Thanked 115 Times in 105 Posts
    Rep Power
    46
    Health warning on the above... once you've started on GPP you may end up converting any logon scripts etc you currently have (I'm going to be moving our drive mappings across to it shortly, have used it to deploy some files and registry settings to change our logon screen)! Nothing bad for your health really... just time consuming to start with (but pays off afterwards)

  10. Thanks to Willott from:

    Iain.Faulkner (13th April 2011)

  11. #8

    Join Date
    Feb 2007
    Location
    Stockport
    Posts
    882
    Thank Post
    265
    Thanked 113 Times in 85 Posts
    Rep Power
    40
    We did try to use this for drive mapping when we put vista in a few years ago, but it wasn't reliable. Not really tried it with 7 yet though, so definitely worth a try.

  12. #9


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,032 Times in 812 Posts
    Rep Power
    339
    Quote Originally Posted by Willott View Post
    Health warning on the above... once you've started on GPP you may end up converting any logon scripts etc you currently have (I'm going to be moving our drive mappings across to it shortly, have used it to deploy some files and registry settings to change our logon screen)! Nothing bad for your health really... just time consuming to start with (but pays off afterwards)
    What does GPP do that makes it better than a scripting language>?

  13. #10

    Join Date
    Dec 2008
    Location
    Nottingham
    Posts
    575
    Thank Post
    38
    Thanked 115 Times in 105 Posts
    Rep Power
    46
    It's fully gui based, so easier to see where things are applying, and logging for it shows in event viewer which can be helpful for seeing where issues lie. It's probably more an alternative than better - the targetting is very easy to complete, which may be usefuly for some people, I wouldn't like to script some of the targetting which can be put in place.

    Cheers

    Will

  14. #11

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,934
    Thank Post
    155
    Thanked 605 Times in 544 Posts
    Rep Power
    160
    GUI

  15. #12


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,032 Times in 812 Posts
    Rep Power
    339
    I see, GUI - prettier but less options

  16. #13

    Join Date
    Dec 2008
    Location
    Essex
    Posts
    2,144
    Thank Post
    1
    Thanked 326 Times in 316 Posts
    Rep Power
    77

  17. #14

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,934
    Thank Post
    155
    Thanked 605 Times in 544 Posts
    Rep Power
    160
    Quote Originally Posted by CyberNerd View Post
    I see, GUI - prettier but less options
    You'd think, but it's pretty good - for example, we use it to map our SIMS S: drive. It gives the option to hide the drive for users, plus the type of connection made to the drive.

  18. #15

    Join Date
    Feb 2008
    Location
    York
    Posts
    39
    Thank Post
    1
    Thanked 4 Times in 4 Posts
    Rep Power
    14
    Why not use client codes, then charge back the staff members department?



SHARE:
+ Post New Thread

Similar Threads

  1. Restricting GPO's
    By Cache in forum Windows
    Replies: 3
    Last Post: 15th January 2011, 03:33 PM
  2. Restricting Skype
    By sdc in forum General Chat
    Replies: 0
    Last Post: 13th December 2010, 01:17 PM
  3. Restricting MMC.
    By boomam in forum Windows
    Replies: 29
    Last Post: 10th January 2008, 08:30 PM
  4. Restricting Logons
    By Espada in forum Windows
    Replies: 2
    Last Post: 6th December 2007, 06:51 PM
  5. Restricting RIS
    By beast_gts in forum Windows
    Replies: 3
    Last Post: 28th June 2007, 10:26 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •