Suppress local printer for certain profiles - KiXtart.org - official site

You are not logged in. [Log In] KiXtart.org website » Forums » KiXtart » Basic Scripting » Suppress local printer for certain profiles

Page 1 of 1

1

Topic Options

#186028 - 2008-03-07 01:19 AM Suppress local printer for certain profiles
Manimal Manimal Getting the hang of it Registered: 2000-04-04 Posts: 96 Loc: Oregon City, OR. USA	Is there a way to suppress (temporarily remove and/or hide) a locally attached printer if a certain user logs on? In other words lets say a PC has a deskjet printer attached to LTP1. That printer would normally be available for anyone that logs in but I want to make it unavailable (meaning invisible) for a certain person/group that would log on to that PC. Further, I'd like for this change to be dynamically set through the logon script (user level permissions). Setting permissions on the printer doesn't do what I want for several reasons. The above example is not exactly what I'm doing but conceptually it's the idea. Personally I've never heard of any way to do it but I figured some one here might have some thoughts. Thanks, Edited by Manimal (2008-03-07 01:21 AM) _________________________ Chris Fricke Clackamas County
Top

#186035 - 2008-03-07 09:08 AM Re: Suppress local printer for certain profiles [Re: Manimal]
NTDOC NTDOC Administrator Registered: 2000-07-28 Posts: 11628 Loc: CA	Please take a look here Tips & Tricks GPanswers
Top

#186041 - 2008-03-07 09:52 AM Re: Suppress local printer for certain profiles [Re: NTDOC]
Richard H. Richard H. Administrator Registered: 2000-01-24 Posts: 4946 Loc: Leatherhead, Surrey, UK	Originally Posted By: NTDOC Please take a look here Tips & Tricks GPanswers You've misunderstood (or posted the wrong UTL) - the poster does not want to hide the "printers & faxes" tools, he wants to hide, deny or temporarily remove individual printers. Personally, I would use the printers' security settings.
Top

#186042 - 2008-03-07 09:58 AM Re: Suppress local printer for certain profiles [Re: Richard H.]
Björn Björn Korg Regular Registered: 2005-12-07 Posts: 953 Loc: Stockholm, Sweden.	I agree with Richard, and I don't know any other way really than using the security settings. _________________________ as long as it works - why fix it? If it doesn't work - kix-it!
Top

#186045 - 2008-03-07 11:22 AM Re: Suppress local printer for certain profiles [Re: Richard H.]
NTDOC NTDOC Administrator Registered: 2000-07-28 Posts: 11628 Loc: CA	Well you may be right Richard, but if so then I don't think it is possible without some advanced coding and some RunNas Administrator type hacking. You can hack the Registry on the fly with RunNas that would probably remove them from view or use(adding and removing printers on the fly during logon every time would be an incredible waste of network bandwidth in my opinion), but that would be very advanced hacking of the registry and using RunNas to do it since I don't think GPO would allow On-The-Fly type changes as it might take a reboot (not tested and don't really have time to dig into such an advanced topic myself right now) Basically in a nutshell though I don't think it is possible with built-in or Microsoft supported tools to do what he wants to do. Can it be done, yes I'm sure it can be but would take some digging and testing to do it. This link I posted would block the Printers menu, but would not stop printing as you pointed out Richard, so guess I did sort of miss it there a bit. $;\)$
Top

#186049 - 2008-03-07 01:22 PM Re: Suppress local printer for certain profiles [Re: NTDOC]
Richard H. Richard H. Administrator Registered: 2000-01-24 Posts: 4946 Loc: Leatherhead, Surrey, UK	It's not really that tricky. Printers have security settings, so it is just a matter of adding the user or group to the printers security context then explicitly denying them access. Everyone other than this user/group would continue to have access. Alternatively remove access from everyone (don't deny it!) and grant access only to those users or groups who you want to have access to the printer. No need to script or hack anything. The only caveat is that the user may still be able to see the printer. They just won't be able to use it. Update: Just tested - if you deny all categories to a user then the printer doesn't even appear in their list.
Top

#186054 - 2008-03-07 07:26 PM Re: Suppress local printer for certain profiles [Re: Richard H.]
NTDOC NTDOC Administrator Registered: 2000-07-28 Posts: 11628 Loc: CA	Well from his post Quote: dynamically set through the logon script (user level permissions). Setting permissions on the printer doesn't do what I want for several reasons. The DYNAMIC during logon to me is the hack as it would also seem to indicate that it needs to be turned on/off on the fly during logon, normal user wouldn't have rights to set such permissions. He also indicates that permissions does not do what he wants so that's why I was looking more at hacking the Registry. Oh well - suppose there needs to be more feedback from him as to why permissions lock down doesn't do what he wants.
Top

#186058 - 2008-03-07 11:50 PM Re: Suppress local printer for certain profiles [Re: NTDOC]
Manimal Manimal Getting the hang of it Registered: 2000-04-04 Posts: 96 Loc: Oregon City, OR. USA	You are all pretty much right on... this isn't an easy thing to do. If possible at all. Now here's why... On our Citrix servers we have recently started using Uniprint. With uniprint when you click file/print you get one option "Uniprint". You click ok and it then shows the printers you have on the local PC. When you then print it wraps the job into a PDF and sends it to the PC so you don't have to have print drivers on the Citrix servers. That's great but so what... Well... with WYSE thin clients there is no local Uniprint client that the server can redirect print jobs to and if you use the "Uniprint" print queue it'll cause problems as there's nowhere for the job to go. SO... Uniprint has a Gateway Spool server that basically looks like a traditional print server to the session and you can mount print queues like with any other print server. Also great but so what... Well the problem is that the generic local "Uniprint" queue is always there and seems to always stay as the default no matter how you tell the connected queue to be default. Even if I can figure out how to not make it default it's dangerous to have in the list cause if it's used it'll crash... but only from a Thin Client. So... I need a way to suppress the "Uniprint" local print queue for anyone launching a session from a Thin Client and yet be available if they then launch a session from a PC (which would have the Uniprint client). Holy Cow if that makes sense to you then you win! Really it's a third party app issue (Uniprint) that I'm trying to work around $\:\)$ _________________________ Chris Fricke Clackamas County
Top

Page 1 of 1

1

Previous Topic

Previous Topic View All Topics

View All Topics

Index Next Topic

Next Topic

Moderator: Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart

Hop to:

Shout Box

Who's Online

0 registered and 657 anonymous users online.

Newest Members

M_Moore, BeeEm, min_seow, Audio, Hoschi
17883 Registered Users

Generated in 0.061 seconds in which 0.028 seconds were spent on a total of 13 queries. Zlib compression enabled.

click tracking