+ Post New Thread
Results 1 to 12 of 12
Windows Thread, removing "Find Printers" from the search submenu in Technical; It has been requested that we give our staff windows search. Currently we hide the whole of the search option ...
  1. #1

    Join Date
    Feb 2007
    Location
    Hereford
    Posts
    213
    Thank Post
    5
    Thanked 3 Times in 3 Posts
    Rep Power
    16

    removing "Find Printers" from the search submenu

    It has been requested that we give our staff windows search.
    Currently we hide the whole of the search option in the start menu with Group policy.

    I want to allow the search for files and folders but allow the searching of printers.

    Is there an ADM file or even the option in GPO that will allow me to hide this option from search?

    Dan

  2. #2

    Join Date
    Sep 2009
    Location
    Northern Ireland
    Posts
    32
    Thank Post
    3
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    I know it's old but instead of creating a new thread I decided to resurrect!

    I too am looking a resolution to this problem. Our users use the windows classic menu as defined by group policy. This has only recently been enforced and as a security measure we have removed the search button from the start menu and explorer. The users don't have access to C drive and can only store their info on a personal network share.

    As you can imagine there have been a few complaints after they arrived back after summer break and weren't able to search their personal space. We have managed to enable search button and prevent them from searching the entire network and local hard drives however I can't find a way to remove the find printers button in the context menu of search.

    When I use the find printers button it allows me to display a list of shared printers across all 4 campuses! Using Group Policy we have ensured that users cannot connect to any of these printers however we want to remove the find printers option completely. Is there a script available or an option within group policy to perform this function?

  3. #3
    ricki's Avatar
    Join Date
    Jul 2005
    Location
    uk
    Posts
    1,477
    Thank Post
    20
    Thanked 164 Times in 157 Posts
    Rep Power
    53
    Have a look at User Configuration, Administrative Templates, Control Panel, and Printers. in a user gpo.

    Richard

  4. #4

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,345
    Thank Post
    242
    Thanked 1,602 Times in 1,278 Posts
    Rep Power
    346
    You can't remove 'Find Printers' but what you can do is hide them being listed in the directory. On your printer server, right click a printer, choose Properties > Sharing. Untick 'List in the directory'.

    The only way users could theoretically add printers would be typing the UNC path: \\servername\printersharename

    It's also recommended to tweak printer permissions too, as typically 'Everyone' can print to a printer. Taking these entries out and adding security groups can stop users printing too - even if they attempt to connect and print.
    Last edited by Michael; 8th September 2009 at 01:38 PM.

  5. #5

    Join Date
    Sep 2009
    Location
    Northern Ireland
    Posts
    32
    Thank Post
    3
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    thanks for the replies,

    I've already looked at all the options within Group Policy including what you suggested Richard.

    I think Michael that your suggestion could work for us. My only problem now is convincing the other campuses to do that too.

    Thanks again
    William

  6. #6

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,345
    Thank Post
    242
    Thanked 1,602 Times in 1,278 Posts
    Rep Power
    346
    Well if you push out printers using Print Management, there should be no real need to publish the printers too. Any printers which need to be added can be dealt with on a one to one basis.

  7. #7

    Join Date
    Sep 2009
    Location
    Northern Ireland
    Posts
    32
    Thank Post
    3
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    exactly, we use Desktop Authority to push out the printers so we don't have to worry about that.

  8. #8

    Join Date
    Sep 2009
    Location
    Northern Ireland
    Posts
    32
    Thank Post
    3
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Ok another problem has come to light related to this. I'm happy enough for the Find Printers dialog box to pop up however the user can click on browse location and view the whole AD structure! This would provide an unacceptable security risk. Is there anyway to get around this?

  9. #9

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,345
    Thank Post
    242
    Thanked 1,602 Times in 1,278 Posts
    Rep Power
    346
    Why is it a potential security risk? What can users see that they can do damage with?

  10. #10

    Join Date
    Sep 2009
    Location
    Northern Ireland
    Posts
    32
    Thank Post
    3
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    As far as I'm concerned I'd be ok with it, but one of my bosses is real anal about security and says that if a student doesn't need something then they shouldn't even see it. I've made a few adjustments to a test GPO and am awaiting his feedback so will let you know.

  11. #11

    Join Date
    Sep 2009
    Location
    Northern Ireland
    Posts
    32
    Thank Post
    3
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Ok I've let my boss know where I'm at with this. The security issues are as follows:

    'The policy change made to the printer properties hides the printer ok but any user can search for any computer (this includes all servers and their shares, etc) or any users details stored within AD on the network.'

    What can I do to lock this down?

  12. #12
    morganw's Avatar
    Join Date
    Apr 2009
    Location
    Cambridge
    Posts
    818
    Thank Post
    46
    Thanked 132 Times in 126 Posts
    Rep Power
    40
    This will stop the search results but will still show the OU structures.

    User configuration / Administrative Templates / Desktop / Active Directory /
    Maximum size of Active Directory searches: Enabled
    Number of objects returned: 0

  13. Thanks to morganw from:

    mtdmitchell (14th October 2010)



SHARE:
+ Post New Thread

Similar Threads

  1. Epson printers "service required"
    By contink in forum Hardware
    Replies: 6
    Last Post: 9th April 2008, 10:59 AM
  2. Replies: 3
    Last Post: 29th February 2008, 01:15 PM
  3. "Error 403" & "Moved to here" message
    By tech_guy in forum Windows
    Replies: 4
    Last Post: 24th January 2008, 02:07 PM
  4. Restrict "Search files and folders"
    By sandfie in forum Windows
    Replies: 4
    Last Post: 26th March 2007, 11:45 PM
  5. Replies: 6
    Last Post: 28th September 2006, 08:06 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •