Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is it possible to configure a printer shared from a generic file and print server in a domain, call it FILEPRINT01, which has a shared printer called OFFICE01, to only allow certain computers to print to it?

Imagine our users can hot desk and any given user can use any given client computer... but we only want people on certain computers to be allowed to print?

For example,

MARY on CLIENT01 tries to print to \\FILEPRINT01\OFFICE01 - OK

JOHN on CLIENT01 tried to print to \\FILEPRINT01\OFFICE01 - OK

MARY on CLIENT99 tries to print to \\FILEPRINT01\OFFICE01 - NO

JOHN on CLIENT99 tries to print to \\FILEPRINT01\OFFICE01 - NO

So, John and Mary are both allowed to print to the printer but only CLIENT01 is allowed print to it so if either user tries to print from that machine it will work. However, CLIENT99 is not allowed print to the printer so when either user tries to print it will not be allowed.

Is this possible?

share|improve this question

1 Answer 1

up vote 3 down vote accepted

Much like when I asked this:

http://serverfault.com/questions/40186/device-based-permissions-in-a-windows-printing-environment

It turns out not to be possible. Printing is handled on the User's token, not the device's token. So when a user goes to print, they access the print-share with their own security credentials. The Workstation's credentials are no part of that transaction. Therefore, you can't do device-based restrictions for printing on Windows.

share|improve this answer
    
+1 - Deja vu... –  Evan Anderson Aug 6 '09 at 3:31

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.