locked
Users Seeing Other User's Printers RRS feed

  • Question

  • We currently run an RD farm with 5 RD hosts.  Users are distributed to the hosts based on load balancing.

    When someone logs into any of the 5 servers, they can not only see the printers they've mapped, but printers other users (on the same host) have mapped.  It will even show duplicates.

    For instance:

    User A logs in and maps Printer 1

    User B logs in and maps Printer 2

    -At this point both User A and B can see both Printers 1 and 2.

    User C logs in and maps Printer 1

    -All 3 users now see 2 copies of Printer 1, and Printer 2.

    Is there any way to hide other users printers, so each user ONLY sees the printers they themselves have mapped?

    Thank you,

    Nickolas

    • Moved by TP []MVP Monday, April 11, 2016 1:16 AM RDS question
    Saturday, April 9, 2016 6:53 PM

Answers

  • Hi,

    1. Are these auto-created redirected printers (e.g. Printername (redirected xxx)) or are they network printers being mapped via group policy or other method?  If redirected, are the printers using RD Easy Print driver or manufacturer driver?  If network, please confirm if you have the below hotfix installed:

    A network printer is deleted unexpectedly in Windows

    https://support.microsoft.com/kb/2967077

    2. Do the users see multiple printers when using Notepad or Wordpad?

    3. Please verify that regular users are not a member of Print Operators by logging on as a regular user, opening a command prompt, and entering the following:

    whoami /groups>groups.txt

    notepad groups.txt

    Thanks.

    -TP

    • Proposed as answer by Amy Wang_ Thursday, April 14, 2016 6:42 AM
    • Marked as answer by Amy Wang_ Friday, April 22, 2016 12:22 PM
    Tuesday, April 12, 2016 9:19 AM

All replies

  • Hi Nickolas,

    As far as I know, members of Print Operators group are able to see all printers.

    Please remove user accounts from the group above.

    Here is a related thread below for you:

    Session (redirected) printers are not visible to administrator on terminal server 2008

    https://social.technet.microsoft.com/Forums/windowsserver/en-US/d4f1a8f2-177d-460b-84a5-7f252ad92d72/session-redirected-printers-are-not-visible-to-administrator-on-terminal-server-2008?forum=winserverTS

    Best Regards,

    Amy

    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, April 11, 2016 8:49 AM
  • Thanks, I've confirmed the users are NOT members of the print operators SG.  As far as permissions on the printers themselves, 'Everyone' SG has 'Print' as the only permission. Other than Administrators (which obviously users are not a member of), the only other security principles for the printers are as follows:

    ALL APPLICATION PACKAGES - Manage Documents

    CREATOR/OWNER - Manage Printer, Manage Documents

    I've performed a 'Read Effective Access' on one of standard users, and confirmed the only permissions they have are 'Print' and 'Read Permissions'.

    Any other ideas?

    • Edited by Nickolas80 Monday, April 11, 2016 5:01 PM
    Monday, April 11, 2016 4:56 PM
  • Thanks, I've confirmed the users are NOT members of the print operators SG.  

    Hi Nickolas,

    Did you check this on both Domain Controller (Active Directory) and local computer (RDS server)?

    Best Regards,

    Amy


    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Edited by Amy Wang_ Tuesday, April 12, 2016 3:09 AM
    Tuesday, April 12, 2016 3:09 AM
  • Hi,

    1. Are these auto-created redirected printers (e.g. Printername (redirected xxx)) or are they network printers being mapped via group policy or other method?  If redirected, are the printers using RD Easy Print driver or manufacturer driver?  If network, please confirm if you have the below hotfix installed:

    A network printer is deleted unexpectedly in Windows

    https://support.microsoft.com/kb/2967077

    2. Do the users see multiple printers when using Notepad or Wordpad?

    3. Please verify that regular users are not a member of Print Operators by logging on as a regular user, opening a command prompt, and entering the following:

    whoami /groups>groups.txt

    notepad groups.txt

    Thanks.

    -TP

    • Proposed as answer by Amy Wang_ Thursday, April 14, 2016 6:42 AM
    • Marked as answer by Amy Wang_ Friday, April 22, 2016 12:22 PM
    Tuesday, April 12, 2016 9:19 AM