Stop Windows 10 Users Searching For Network Printers

[FN-GM]

Hello,

 

Does anyone know of a way to stop users from adding their own network printers please? They are doing this trough the settings app. Because they are doing this they are by-passing our print server! I have added a screenshot to demonstrate this.

 

Thanks

[free780]

You can hide the printer part of the settings app in group policy targeted at users since 1803 I believe.

[3s-gtech]

If they’re bypassing the print server, I believe that means the printers are broadcasting their addresses on your network. You can look at the web settings of those printers and disable the protocols that you’re not using (anything other than LPD usually suits).

 

If you can’t do it this way, I’m not sure at the moment - most of my users can’t get to the Settings app.

[andy_b]

Some printers/MFD have a setting that only allows you to print from specific IP's.

 

Brother calls this "IPV4 filter" on their printers.

 

Could this be setup?

[Arthur]

IIRC, when I had the same issue with our Ricoh and Kyocera MFDs it was because the "Web Services for Devices" and SSDP protocols were enabled.

 

 

 

[LeMarchand]

I'm probably being dense, but are these school owned? Can't they just be "retired"? If they're bringing their own printers could you refuse them an IP address?

[FN-GM]

Thanks to those who replied. The amount of printers we have it will be a huge job to disable it on each. Ideally I need something quick so Group Policy would be proffered. We can look at the changing each printer long term when we have more time. I will have a proper look in the morning and see if I can find anything. If anyone does have anymore suggestions please don't hesitate to reply.

[LeMarchand]

Thanks to those who replied. The amount of printers we have it will be a huge job to disable it on each. Ideally I need something quick so Group Policy would be proffered. We can look at the changing each printer long term when we have more time. I will have a proper look in the morning and see if I can find anything. If anyone does have anymore suggestions please don't hesitate to reply.

 

You can multi-select and List/Remove from directory (assuming they're shared via a print server). Otherwise - this is a bit old, so would need testing ( https://social.technet.microsoft.com/Forums/en-US/dfc52a77-15e5-439e-b54f-5ca5d32b73f8/disable-quotadd-devicequot-button-in-devices-and-printers?forum=windowsserver2008r2general )

 

We can use the policy “Hide specified control panel items” to remove the control panel item from the Control Panel window:

 

 

1. Edit a GPO.
   
2. Navigate to User Configuration\Policies\Administrative Templates\Control Panel.
   
3. Double-click Hide specified control panel items in the right pane, select Enable, click Show button, and type Microsoft.DevicesAndPrinters.
   

 

Similar to what @free780 suggested

[FN-GM]

Due to various other bits I am disabling the printers from broadcasting themselves. For the life of me we can't find the setting on the brother. Any tips please?

 

EDIT: I did a firmware update and the option to disable appeared.

Edited October 9, 2019 by FN-GM

[ITGuyWestMidlands]

Stick them on their own vlan perhaps. Printers are chatters.

[mavhc]

remove most things from settings for pupils. My GPO filtered for pupils AD security group has:

 

User Configuration (Enabled)hide

Policieshide

Administrative Templateshide

Policy definitions (ADMX files) retrieved from the central store.Control Panelhide

Policy Setting Comment

Settings Page Visibility Enabled

Settings Page Visibility: showonly:signinoptions;mousetouchpad;devices-touchpad

 

Policy Setting Comment

Show only specified Control Panel items Enabled

List of allowed Control Panel items

Microsoft.Mouse

[FN-GM]

Stick them on their own vlan perhaps. Printers are chatters.

 

It is on the list

[_techie_]

You can hide them from the directory (if using a Windows printserver), this will stop them being found in the first place.

However if students are manually adding them, how are they doing this?

Just a thought.

[FN-GM]

You can hide them from the directory (if using a Windows printserver), this will stop them being found in the first place.

They are not in the directory. They are being discovered via WSD

 

However if students are manually adding them, how are they doing this?

 

I don't work for a school anymore.