How to Allow Users to Print to Only One Printer?

Question

We are using Amazon Workspaces, running Server 2019. We want to lock the printing down so that regardless of whether they're in the office or elsewhere, the only printer they can print to is the network printer located in the office.

How could I go about accomplishing this?

Answer 1

HI

1.How do you deploy printers to target Server 2019?
2.Did you install "RD session host" role on target server 2019?
3.Are all deny print users not in the local administrators group of target server 2019?

In general, to restrict the printer usage,
(1)we can remove/delete the ACE for Everyone for specified printer.

(2)then create a user group for specified printer in ADUC on Domain control and add a new ACE for the permitted user or group(usergroup1) in printer management on printer server. Then add allow print user accounts to this group(usergroup1).
like below pictures

If you want to allow users to print to only one printer, we can remove specified users from allowing print user group.
For example:
If I want user2(u2) and it account to print to HP5100 printer and don't want user1(u1) and user3(u3) to print to HP5100 printer or other printers, I will remove user1(u1) and user3(u3) account from allowing print user group(usergroup1) in ADUC on DC. After that operation, we need to let user1(u1) and user3(u3) account re logon the target RD session host(server 2019) then setting will take effect.

How to prevent users from adding or sending printing to specific network printer?
https://social.technet.microsoft.com/Forums/lync/en-US/0dbafe61-d09b-4614-a55d-100e4220165b/how-to-prevent-users-from-adding-or-sending-printing-to-specific-network-printer?forum=winserverprint

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.