This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 26%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EE%3C/text%3E%3C/svg%3E)
dears,
i need your advise based on your experience:
i have a printer connected to the network. i was requested to find a way to restrict users on using the printer.
is there any gpo to choose just specific users from using a printer? the printer is mapped on the windows clients but is not a domain joined printer
thank you
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(265.6, 24%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAR%3C/text%3E%3C/svg%3E)
Using the 'Deny' is great for all or nothing approach. Is there a way to set a GPO to deny users from physically printing locally while working remote but allowing them to use the "Microsoft Print to PDF" feature? Thanks
Hi@ eg1995-5273
Add a security group 'DenyPrinting' to all printers with the setting Print -> Deny.
Use GPO to 'Disable the addition of printers' for this group.
Add users to the group who shouldn't print
Print Management Guide - Group Policy and Printing
Please don’t forget to Accept the answer and up-vote wherever the information provided helps you, this can be beneficial to other community members.
any other answers noting again that the printer is shared on the network but is not joined to active directory.
and i need to prevent some devices that are joined to AD from accessing the printer
thanks
any updates as the answer is not clear
thanks
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 28.999999999999996%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVW%3C/text%3E%3C/svg%3E)
By default, everyone can connect to the printer share and can spool documents to print and can pause/cancel/delete the print jobs submitted by themselves.
To restrict the printer usage, remove/delete the ACE for Everyone and add a new ACE for the permitted users or group, with the Print=Allow=checked
Hope this information can help you
Best wishes
Vicky
Hi,
Just checking in to see if the information provided was helpful.
Please let us know if you would like further assistance.
Best Regards,
Vicky
