How do I enable the print and point restrictions on my print server?
Update and Manage Printer Drivers Show The following sections provide information about how to use the Print Management snap-in to manage printer drivers on a print server:
Add drivers for client computers running 32-bit or 64-bit versions of Windows To support client computers that use different processor architectures than the print server, you must install additional drivers. For example, if your print server is running a 64-bit version of Windows and you want to support client computers running 32-bit versions of Windows, you must add x86-based drivers for each printer.
To add client printer drivers to the print server
Update or change printer drivers To update or change the printer drivers for a printer, use the following procedure. Client computers automatically download and install the updated printer drivers the next time they attempt to print to the printer.
To update or change printer drivers for a printer
Remove printer drivers When you install a printer driver on a computer that is running Windows 7 or Windows Server 2008 R2, Windows first installs the printer driver to the local driver store, and then installs it from the driver store. When removing printer drivers, you have the option to delete only the printer driver or remove the entire printer-driver package. If you delete the printer driver, Windows uninstalls the printer driver, but leaves the printer-driver package in the driver store to allow you to reinstall the driver at some point. If you remove the printer-driver package, Windows removes the package from the driver store, completely removing the printer driver from the computer. To remove printer drivers from a server, use the following procedure: To remove printer drivers
Control Printer Driver Installation Security The default security settings for Windows 7 and Windows Server 2008 R2 allow users who are not members of the local Administrators group to install only trustworthy printer drivers, such as those provided with Windows or in digitally signed printer-driver packages. This helps to ensure that users do not install untested or unreliable printer drivers or drivers that have been modified to contain malicious code (malware). However, it means that sometimes users cannot install the appropriate driver for a shared printer, even if the driver has been tested and approved in your environment. The following sections provide information about how to allow users who are not members of the local Administrators group to connect to a print server and install printer drivers that are hosted by the server:
Installing printer-driver packages on the print server Printer-driver packages are digitally signed printer drivers that install all the components of the driver to the driver store on the client computers (if the server and the client computers are running Windows 7 Windows Server 2008 R2). Additionally, using printer-driver packages on a print server that is running Windows 7 or Windows Server 2008 R2 enables users who are not members of the local Administrators group to connect to the print server and install or receive updated printer drivers. To use printer-driver packages, on a print server that is running Windows Server 2008 R2 or Windows 7, download and install the appropriate printer-driver packages from the printer vendor.
Using Group Policy to deploy printer connections to users or computers Print Management can be used with Group Policy to automatically add printer connections to the Printers folder, without requiring the user to have local Administrator privileges. For more information, see Deploying Printers by Using Group Policy. Using Group Policy to modify printer driver security settings You can use the Point and Print Restrictions Group Policy setting to control how users can install printer drivers from print servers. You can use this setting to permit users to connect to only specific print servers that you trust. Because this setting prevents users from connecting to other print servers that could potentially host malicious or untested printer drivers, you can disable printer driver installation warning messages without adversely compromising security. Carefully evaluate your users' printing needs before limiting which print servers they can connect to. If users occasionally need to connect to shared printers in a branch office or another department, make sure to include those printer servers on the list (if you trust the printer drivers that are installed on the servers). You can also use the Point and Print Restrictions setting to disable warning prompts entirely, although this setting disables the enhanced printer driver installation security of Windows 7 and Windows Server 2008 R2 for these users.
To modify the Point and Print Restrictions setting
To permit users to connect only to specific print servers that you trust
Create a New Printer Filter Printer filters are used to display only those printers that meet a certain set of criteria. For example, it might be helpful to filter for printers with certain error conditions or those printers in a group of buildings regardless of the print server they use. Two default filters are provided with Print Management. For each filter that you create, you have the option to set up an e-mail notification or to run a script when the conditions of the filter are met.
To set up and save a filtered view
Setting Optional Notifications When you create or modify a filter, you have the option of sending an automatic e-mail notification to someone or running a script when the conditions of the filter are met. This is useful for resolving printer problems, particularly in an organization with multiple buildings and administrators. For example, you can set up a view of all printers managed by a particular print server where the status does not equal Ready. Then, if a printer changes from the Ready status to another status, the administrator could receive a notification e-mail from Print Management. In addition to setting notifications on a custom set of printers, you can set notifications on printer server objects. For example, if the server is offline, or the spooler goes down, an e-mail notification can be sent. Script notifications are useful for resolving printer problems and troubleshooting. For example, you could automatically run a script to restart a spooler when printers go offline. You could also automatically run a script that prints a test page. Scripts can be written in Visual Basic Script (.vbs) or any scripting language available on the computer. The script has to be on the computer with Print Management. The script should be running with your credentials and you need to have the permissions to do whatever it is that you want the script to do. Create a New Driver Filter You can use Print Management snap-in to create custom print driver filters. Filters display only those print drivers that meet a certain set of criteria.
To create a new driver filter
Setting Optional Notifications When you create or modify a filter, you have the option of sending an automatic e-mail notification to someone or running a script when the conditions of the filter are met. This is useful for resolving driver problems. Script notifications are useful for resolving driver problems and troubleshooting. View Extended Features for Your Printer er. Extended view is useful when you want more information about the status of a print job, its owner, the number of pages, the size of the job, when it was submitted, its port, its priority, and other advanced job properties. In the Print Management snap-in, extended view displays beneath the columns in the right pane. To show extended features for your printer
You can use Print Management to add, delete, and configure printer ports for a print server. To add and manage ports
You can use Print Management to manage printer forms. To manage forms
To secure a print server, you must consider what rights users and groups will have. You can secure a print server by granting specific rights to users or groups of users. For each user or group of users, you can grant or deny permission to:
Set permissions for print servers
How can we restrict the user from printing?If you are using a print server you can simply go to the Security tab (on each printer) and only allow access to those who should have it.
Where are my printing settings?Select Start > Settings . Go to Devices > Printers & scanners > select a printer > Manage. Then select Set as default. If you don't see the Set as default option, the Let Windows manage my default printer option may be selected.
What is point and print policy?Point and Print refers to the capability of allowing a user to create a connection to a remote printer without providing disks or other installation media. All necessary files and configuration information are automatically downloaded from the print server to the client.
|