I think the easiest would be is, if you have a spare desktop computer whether WinXP. Install printer drivers on it and share printers and make sure you publish in the directory. This would be a half a day to all day job as you need to build winXp machine if you already not have, installing drivers, scanning printers, then sharing them We are a government entity with hundreds of thousands of users, my little slice of heaven only has about users and is restricted by what I can do, but I will try the GPs and if that doesn't work, I have a staff that can start logging in via RDP as admins and installing the printers that are required by the users.
We prefer to have the printers assigned to users as they wish to print to their work space while logged in at say a conf room. To continue this discussion, please ask a new question. Get answers from your peers along with millions of IT pros who visit Spiceworks. Best Answer. Br d This person is a verified professional. Verify your account to enable IT peers to see that you are a professional. View this "Best Answer" in the replies below ». Popular Topics in Windows Server.
Which of the following retains the information it's storing when the system power is turned off? The tutorial: GPO: add a registry key explains how to create a group policy to act on the registry. Ideally create two group policies, one for Point and Print Restrictions and one for the registry key. Activate the 1 strategy, select Do not display warning or elevation prompt 2 and click Apply 3 then OK 4. Now that the Point and Print Restrictions parameter we will configure the second policy to allow non-administrators installed.
The significant difference will be the location of the device in the Device Manager hierarchy. Instead of being located in the Printers node, you must locate your device in the appropriate node.
To open Device Manager, click the Start button, type mmc devmgmt. Device Manager starts and displays a tree representing all of the devices detected on your computer.
At the top of the tree is a node with your computers name next to it. Lower nodes represent the various categories of hardware into which your computers devices are grouped.
Selecting the printer in Device Manager. You can also determine your device identification strings by using the PnPUtil command-line utility. In this simple scenario, you will learn how to prevent the installation of an entire Class of devices. Our current scenario is focused on preventing all printers from being installed, as such here is the Class GUID for most of printers in the market:.
As mentioned before, preventing an entire Class could block you from using your system completely. Please make sure you understand which devices are going to be blocked when specifying a Class. For our scenario, there are other classes that relate to printers but before you apply them, make sure they are not blocking any other existing device that is crucial to your system. This will take you to a table where you can enter the class identifier to block.
Enter the printer class GUID you found above with the curly braces this is important! Using a Prevent policy like the one we used in scenario 1 above and applying it to all previously installed devices see step 9 could render crucial devices unusable; hence, use with caution. If you completed step 9 above and restarted the machine, simply look for your printer under Device Manager or the Windows Settings app and see that it is no-longer available for you to use. This scenario builds upon scenario 1, Prevent installation of all printers.
In this scenario, you target a specific printer to prevent from being installed on the machine. Although the policy is disabled in default, it is recommended to be enabled in most practical applications. For scenario 2 it is optional. Printer Hardware ID. This will take you to a table where you can enter the device identifier to block. Prevent Device ID list. If you completed step 8 above and restarted the machine, simply look for your printer under Device Manager or the Windows Settings app and see that it is no-longer available for you to use.
For USB printer — unplug and plug back the cable; for network device — make a search for the printer in the Windows Settings app. Now, using the knowledge from both previous scenarios, you will learn how to prevent the installation of an entire Class of devices while allowing a single printer to be installed.
Getting the device identifier for both the Printer Class and a specific printer — following the steps in scenario 1 to find Class identifier and scenario 2 to find Device identifier you could get the identifiers you need for this scenario:.
Apply layered order of evaluation policy. This will take you to a table where you can enter the device identifier to allow. Allow Printer Hardware ID. Simply look for your printer under Device Manager or the Windows Settings app and see that it is still there and accessible. Or just print a test document. Go back to the Group Policy Editor, disable Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria policy and test again your printer — you should not be bale to print anything or able to access the printer at all.
The scenario builds upon the knowledge from scenario 2, Prevent installation of a specific printer. In this scenario, you will gain an understanding of how some devices are built into the PnP Plug and Play device tree. Getting the right device identifier to prevent it from being installed and its location in the PnP tree:.
Selecting the usb thumb-drive in Device Manager. This view represents the way devices are installed in the PnP tree. Changing view in Device Manager to see the PnP connection tree. When blocking one device, all the devices that are nested below it will be blocked as well. USB device hardware IDs. Prevent Device IDs list. If you completed step 8 above and restarted the machine, simply look for your Disk drives under Device Manager and see that it is no-longer available for you to use.
Now, using the knowledge from all the previous 4 scenarios, you will learn how to prevent the installation of an entire Class of devices while allowing a single authorized USB thumb-drive to be installed. Getting the device identifier for both the USB Classes and a specific USB thumb-drive — following the steps in scenario 1 to find Class identifier and scenario 4 to find Device identifier you could get the identifiers you need for this scenario:.
As mentioned in scenario 4, it is not enough to enable only a single hardware ID in order to enable a single USB thumb-drive. The IT admin has to ensure all the USB devices that preceding the target one are not blocked allowed as well. In Our case the following devices has to be allowed so the target USB thumb-drive could be allowed as well:.
USB devices nested under each other in the PnP tree. These devices are internal devices on the machine that define the USB port connection to the outside world. Some device in the system have several layers of connectivity to define their installation on the system.
USB thumb-drives are such devices. Thus, when looking to either block or allow them on a system, it is important to understand the path of connectivity for each device. See below for the list:. Specifically for desktop machines, it is very important to list all the USB devices that your keyboards and mice are connected through in the above list. Failing to do so could block a user from accessing its machine through HID devices. The previous step prevents all future USB devices from being installed.
Skip to main content. This browser is no longer supported. Download Microsoft Edge More info. Contents Exit focus mode. Is this page helpful? Please rate your experience Yes No. Any additional feedback? Important The steps provided in this guide are intended for use in a test lab environment. Note For more information about the driver installation process, see the "Technology review" section of the Step-by-Step Guide to Driver Signing and Staging.
Note This policy setting provides more granular control than the "Prevent installation of devices not described by other policy settings" policy setting. Note These procedures are specific to a Canon printer.
Tip You can also determine your device identification strings by using the PnPUtil command-line utility. Note As mentioned before, preventing an entire Class could block you from using your system completely. Important Using a Prevent policy like the one we used in scenario 1 above and applying it to all previously installed devices see step 9 could render crucial devices unusable; hence, use with caution.
Important Some device in the system have several layers of connectivity to define their installation on the system. Important The previous step prevents all future USB devices from being installed. Submit and view feedback for This product This page.
0コメント