none
Searching AD shared printers in the required OU only

    Question

  • Hi All!

    Is there a way to allow searching of Active Directory shared pinters in the required OU ONLY ? In addition, searching printers in other OUs must be denied.

    Prefer to do this using GPO.

    Thanks in advance!


    • Edited by Oleg Kyba Tuesday, April 19, 2016 7:20 AM
    Tuesday, April 19, 2016 7:20 AM

Answers

  • Hi,
    Maybe, you could have a try policy “Allow Printers to be Published” under the Printers section of the Administrative Templates in the Computer Configuration section.
    If you enable this setting or do not configure it, users can use the "List in directory" option in the Printer's Properties' Sharing tab to publish shared printers in Active Director. If you disable this setting, this computer's shared printers cannot be published in Active Directory, and the "List in directory" option is not available.
    First, it requires that the authorized users be placed in an OU. Next, create a group policy for that container. Next, change this same control on all other GPOs to Disable. Finally, rename the printer shares for the new printers. Please see details from:
    Controlling the appearance of printers in Active Directory
    http://searchwindowsserver.techtarget.com/tip/Controlling-the-appearance-of-printers-in-Active-Directory
    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
    Regards,
    Wendy

    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, April 28, 2016 2:02 AM
    Moderator

All replies

  • One way that you can do this is to set the location attribute on the printer shares. In Group Policy, you can then specify the prefix location that users can search.

    Look under the Should I be setting a printer location? segment of this article: https://deployhappiness.com/best-practices-for-group-policy-printer-preferences/


    If my answer helped you, check out my blog: Deploy Happiness

    Tuesday, April 19, 2016 12:06 PM
  • Hi,
    You could configure a Group Policy Preference to set a registry key based on item level targeting. This registry key will predefine a search query that will be used to display only the printers that meet the query results. Please see details from:
    Managing location based printers in an enterprise environment
    http://ivan.dretvic.com/2013/11/managing-location-based-printers-in-an-enterprise-environment/
    Please Note: Since the web site ais not hosted by Microsoft, the links may change without notice. Microsoft does not guarantee the accuracy of this information.

    Regards,
    Wendy


    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, April 20, 2016 2:57 AM
    Moderator
  • Hi,
    You could configure a Group Policy Preference to set a registry key based on item level targeting. This registry key will predefine a search query that will be used to display only the printers that meet the query results. Please see details from:
    Managing location based printers in an enterprise environment
    http://ivan.dretvic.com/2013/11/managing-location-based-printers-in-an-enterprise-environment/
    Please Note: Since the web site ais not hosted by Microsoft, the links may change without notice. Microsoft does not guarantee the accuracy of this information.

    Regards,
    Wendy


    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    So, I've created a *.QDS file to search printers at required OU by default. That's fine, but users can choose another OUs at drop-down list "In:". Is there a way to make it inactive?


    • Edited by Oleg Kyba Monday, April 25, 2016 9:38 AM
    Monday, April 25, 2016 9:35 AM
  • Hi,
    Maybe, you could have a try policy “Allow Printers to be Published” under the Printers section of the Administrative Templates in the Computer Configuration section.
    If you enable this setting or do not configure it, users can use the "List in directory" option in the Printer's Properties' Sharing tab to publish shared printers in Active Director. If you disable this setting, this computer's shared printers cannot be published in Active Directory, and the "List in directory" option is not available.
    First, it requires that the authorized users be placed in an OU. Next, create a group policy for that container. Next, change this same control on all other GPOs to Disable. Finally, rename the printer shares for the new printers. Please see details from:
    Controlling the appearance of printers in Active Directory
    http://searchwindowsserver.techtarget.com/tip/Controlling-the-appearance-of-printers-in-Active-Directory
    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
    Regards,
    Wendy

    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, April 28, 2016 2:02 AM
    Moderator