Windows Thread, Windows Picture & Fax Viewer + Printer in Technical; Just recently I have discovered a problem that could be a security loophole.
Basically I have disabled all our students ...
10th December 2008, 10:14 AM #1
Windows Picture & Fax Viewer + Printer
Just recently I have discovered a problem that could be a security loophole.
Basically I have disabled all our students from adding/deleting/searching in the 'Printer and Faxes' for printers through GPO. However, this goes right out of the window because students can easily add a printer using the Windows Picture & Fax viewer.
They simply open up a picture, click on the print icon, click next and it's from here they can then click 'Install Printer' and search for printers across the network.
Is there any way I can prevent students from doing this? I'm having a problem whereby they are adding most of the SMT printers and printing to them. On one occasion someone sent 700 copies of a nude Pamela Anderson to the principal's printer. Thankfully he was out on a meeting all day.
10th December 2008, 10:18 AM #2
The way I have got round this may be slow and painfiul if you have many printers that you don't want the students to print to.
I have used the security tab for the banned printers and only allowed staff and administrators permission to use the printers... removing all mention of pupils. Having inadvertently removed my own permissions for said printers I have discovered you definitely can't add them by any means to use them.
If they're local printers, you'll have to logon with admin rights to the appropriate PC, I think
If they are network printers, you can use Papercut, Print Manager Plus or similar to block their use by students
Last edited by elsiegee40; 10th December 2008 at 10:28 AM.
10th December 2008, 10:20 AM #3
If your printers are shared from the servers, can't you just set the appropriate security per-printer to ensure students don't have the rights to print to them?
EDIT: ^ ^ What she said
10th December 2008, 11:15 AM #4
Our print management software is set up to throw away any printout that comes from Picture and Fax viewer....... or anything that has http in the document title... saves a fortune in printing costs.
10th December 2008, 01:14 PM #5
I've done this to all the printers in the school now. Created a security group and put in the students to prevent them from doing this to all standalone printers. Especially the SMT printers.
Originally Posted by elsiegee40
However, I would still like these students to print to other printers when they're in a particular classroom. For example, students are in classroom 1 and print to classroom 2 printer. You ban them from printing to that printer using a security group, but what happens afterwards? They go to classroom 2 and then find they can't print to it. Is there some other way to do this?
10th December 2008, 01:16 PM #6
What print management software are you using?
Originally Posted by broc
10th December 2008, 01:49 PM #7
PCounter for Windows.
Originally Posted by Chuckster
We bought it after we caught a student who had just finished printing enough A4 colour images to paper her bedroom walls ......
10th December 2008, 01:58 PM #8
We run a VBS script which deletes all non-local printers from student systems at startup and adds new ones based upon an environment variable we set up called 'LOCATION' (I think the script was downloaded from Edugeek & modified locally).
The first time the script runs the drivers get copied from the print server.
We then run the same script when the students log on, this adds the printers to their sessions. As the drivers are already loaded they don't need permission to install printers. GPO prevents students using Add/Remove printer to change our selection.
This process means students only get printers local to where they are working.
I an sure this is/was described elsewhere on Edugeek; I claim no credit, I certainly didn't invent it!
10th December 2008, 04:15 PM #9
This thread has the script Broc's talking about. It uses the computer name to work out which room the user is in.
A Printer Script
By atfnet in forum How do you do....it?
Last Post: 10th July 2011, 11:58 AM
By FN-GM in forum Recommended Suppliers
Last Post: 10th September 2008, 12:26 PM
Last Post: 1st February 2008, 12:35 PM
Last Post: 27th September 2006, 08:19 AM
By RobC in forum Windows Vista
Last Post: 7th July 2006, 09:42 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)