Restrict printers based on security groups

We have set up all of our printers on a server and deployed them via group policy.  I am looking for a way to restrict printing based on which security group the user is in.  We have got it working by setting permissions in the printer security tab
in the server.  But I would like a more elegant solution, since the printers that the user can't print to are greyed out with an X over the icon.  I would like to have the printer not even show up in the printer list if that user isn't allowed to
print there.
Is this possible?
We are running Windows Server 2008 R2 and our clients are all Windows 7.
Thank you.

Hi,
Based on your description, we can use Security Filtering to apply the printer deployment GPO polices to the specific groups.
Regarding this point, the following articles can be referred to for more information.
Security filtering using GPMC
http://technet.microsoft.com/en-us/library/cc781988(v=WS.10).aspx
Filter using security groups
http://technet.microsoft.com/en-us/library/cc779291(v=WS.10).aspx
Besides, we can choose to deploy printers via GPP and use Item-level Targeting to filter out users who don’t need the printers.
Regarding this point, the following blog can be referred to for more information.
Deploying Printers with Group Policy Preferences (Complete Guide)
http://deployhappiness.com/deploying-printers-with-group-policy-preferences/
Regarding Item-level Targeting, the following articles can be referred to for more information.
Preference Item-Level Targeting
http://technet.microsoft.com/en-us/library/cc733022.aspx
Security Group Targeting
http://technet.microsoft.com/en-us/library/cc772471.aspx
Best regards,
Frank Shen

Similar Messages

  • How to change the values in custom profiles based on security group ??

    Hi,
    i am facing problem for my requirement, can anybody help me for below scenario...
    i have custom check in profiles , there are content types and sub types. sub type nothing but a categories on for particular content type. For example i have News content type , same in the below subtypes drop down list are press release, events, articles etc.
    what i want to do is, when i open custom checkin profile, subtype values need to be changed( some values in subtype should hide) based on security group changes .
    In the Sub type listed values, some values need to hide only when i choose different security groups.. sub types values should display based on the particular security group only. when ever i change the security group, drop down Values in subtypes needs to change.
    hope understand my requirement.
    How to achieve this task. Any help would be greatly appreciated.
    Thanks,
    yt

    Hi,
    Thanks alot. its working fine
    Can we configure DCL Relation two times in one information filed ??? i should not create not more than fields to this requirement.
    Type -> subtype = DCL already existed
    Now, i want to Create DCL to
    Subtype ---> Security group
    As per my requirement, if i change the security group in checkin form, values should be change in the SubType drop down list.
    Created checkin profile there was DCL relation to " Type and "Sub Type" . now i want to map Relation ( DCL ) for subtype to security group.
    i was trying do for DCL for subtype and security group. but there was already existing DCL created for subtype information field (Relation configuration done for content type). even though i was trying to do for DCL in Security group information field. but, i could not find security group information field in configuration manager.
    Now what should i do ?? how to create DCL to subtype and security group ??
    Help would be appreciated.
    yt

  • Shared Calendars / Room Lists and automatically forcing them to users based on Security Group Membership

    Good morning all,
    I need some help achieving the following in our Exchange 2013 Environment.  First off, we have Exchange 2013, but all our clients have Outlook 2010.
    Here's what I would like to be able to do:
    1) create/manage public calendars / rooms in exchange 2013
    2) force these shared public calendars / rooms to users' calendars who are members of particular security groups
    3) give edit permissions / "booking" permissions for the shared calendars so select users are able to make changes to the shared calendars, as well as accept/deny requests to "book" shared room calendars
    Any one got any resources they can give to point me in the right direction?
    I have already created two mailbox room resources, and have them set up in a room list in AD.  But need to know the above as far as creating a shared calendar for events, and forcing these calendars / room lists out to users based on security group
    membership.
    I don't want my users to have to know how to add a shared calendar...that would be a nightmare explaining.  I just want it to show up.
    Any help on this is greatly appreciated, thank you!

    1) I recommend using Room Mailboxes for resource calendars because it just works better.
    2) This is a standard feature of a Room Mailbox.
    3) You're pretty specific here, but I think this is also more or less available with a Room Mailbox combined with folder rights.
    I don't know any way to just make them "show up".  You'll have to teach them.  Well written instructions can work wonders.
    Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

  • Filter list items based on security groups o365

    How to filter list items based on security groups in o365.

    Hi,
    According to your description, my understanding is that you want to filter list items based on the Office 365 security groups.
    If that is the case, I suggest you can create a data view to filter the list items with CAML Query like below:
    <Where>
    <Membership Type="CurrentUserGroups">
    <FieldRef Name="VisibleToGroup"/>
    </Membership>
    </Where>
    For more information, please refer the detailed article below:
    SharePoint - Filtering a View by Group Membership
    Thanks
    Best Regards
    TechNet Community Support
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
    [email protected]

  • Ideas for restricting content based on security

    I am relatively new to the Oracle UCM world, so please be gentle...
    I'm looking to move a current website over to Oracle UCM, and this website currently has a logon functionality. I believe our plan is to use the current Oracle security model to mimic the current login functionality. The current website is designed as two "seperate" sites (one for the public, and one for the registered users), but is reproducing some content across both versions of the site. Obviously, moving to content server, we could share the same content. The problem we are having trouble wrapping our heads around is as follows...
    There is a "Resources" section, for example, that contains different links based on if you are logged in or not. We want to allow contributors the ability to edit this content, but cannot figure out how to fit this data into the current system. Basically, we have a page that looks like this:
    Resources (title)
    Link 1 (public link)
    Link 2 (public link)
    Link 3 (logged in only link)
    Link 4 (public only link)
    Link 5 (logged in only link)
    Link 6 (public link)
    My initial thought was to have each link basically as a content item and assign it a security group, which will show or hide the link based on the users role. I think that would work pretty well for this page, but then we have an "About" page which is literally just 3 paragraphs of content, but if you are logged in, there is a link in the middle of one of the paragraphs. If this is a contribution region, I dont know how to tag that "partial" piece of content to not show with the overall content. This 2nd example does not seem to work with the 1st examples solution, and I want to find a solution that will work for the entire site.
    Any suggestions? I'm sure there are pieces of this that weren't clear, so if there's anything I can clarify, please let me know!
    Thanks,
    Dave
    Edit: I should mention I am using 10gr4
    Edited by: dpagini on Mar 12, 2010 1:10 PM

    Thanks for the reply, sapan.
    As I mentioned, I think that model could work pretty well for me in that one example, but I also have a different type of content, outlined below which this solution will need to work for.
    My page would look like this:
    Lorem ipsum dolor sit amet, consectetur adipiscing elit. Etiam arcu urna, suscipit ac sollicitudin eu, aliquet sit amet mi. In ut consectetur orci. Nam tempus diam at nisi lobortis sit amet volutpat tortor rhoncus. Vivamus dignissim tincidunt eros vel congue. Pellentesque sagittis tellus non enim euismod in vehicula nibh ullamcorper. Ut dignissim, elit a fringilla lacinia, lectus dolor tempus risus, ut ullamcorper dolor mauris et sapien. Ut non consequat mauris. Sed tempus egestas tortor, in fringilla urna porta nec. Ut in pretium massa. Phasellus sed augue et sem egestas faucibus. Duis ligula ligula, condimentum a tristique nec, faucibus non enim. Quisque pretium sapien et nibh eleifend imperdiet sed sed diam. Proin at orci odio.
    LINK >>
    Nullam vitae molestie lectus. Quisque in nunc orci. Duis ultrices ullamcorper metus nec aliquam. Sed ac aliquet massa. Nulla dapibus vestibulum magna, ultricies molestie mauris ultrices vel. Maecenas sit amet accumsan augue. Sed risus arcu, rhoncus ut porta nec, mattis eu velit. Vivamus ligula odio, gravida eu tempus eleifend, elementum ut dui. Nulla fermentum placerat varius. Praesent aliquet scelerisque dolor, id laoreet orci posuere sit amet. Pellentesque dignissim tincidunt ante, sit amet commodo arcu euismod nec. Vestibulum facilisis aliquam scelerisque.
    In this page, I would only want to present the logged in users the "LINK" at the end of the first paragraph. I see how I could easily wrap that part in the iDoc if statement, but I want to keep this whole section of content as one contribution region that a contributor could edit right on the page, and not have to know iDoc script. Do you see my problem?
    Thanks.

  • Filter SharePoint 2010 Ent. content types based AD Security Group

    We are trying to use SharePoint as a records management system. I have several site collections (Team Site at the root of each site) and my plan is to setup one site collection as a content type hub. The content type hub would then distribute all of the
    content types to my other site collections. Since I may have 70 different content types I want to filter what each user can see based on AD Security Groups (the SG matches the department the employee is in). This way they can only choose the content type that
    applies to their department and it won't be so confusing. I'll then apply retention policies based on content type. I know that I can apply retention policies based on the document library but I want the users to be able to organize their records however they
    want to.
    Am I taking the wrong approach? Is this possible?

     
    Hi,
    As far as I know, we can define the Permission Set on a content type. In this way, you can control which users or group can change or access which content types.
    For more information about SharePoint security and content type, see
    http://blog.contentmanagementconnection.com/Home/21510
    Thanks,
    Rock Wang
    Rock Wang TechNet Community Support

  • TS desktop show shortcut's based on security group

    Hello,
    I'm looking to have users connect to a TS desktop and have applications shortcuts appear on the desktop based on their security group membership. So if a user is in an "Oracle" security group they would get
    an "Oracle" shortcut on their desktop. The tricky thing to this is that I only want these shortcut's to show up on the TS desktop, not their normal workstations.

    Hi,
    >>The tricky thing to this is that I only want these shortcut's to show up on the TS desktop, not their normal workstations.
    Based on your description, we can use Group Policy Preferences Shortcuts extension to deploy the shortcuts and then utilize GPP
    Item-Level Targeting to apply the settings to the users who belong to a specific group when they log onto specific computers.
    Regarding GPP Shortcuts extension, the following article can be referred to for more information.
    Shortcuts Extension
    http://technet.microsoft.com/en-us/library/cc730592.aspx
    Configure a Shortcut Item
    http://technet.microsoft.com/en-us/library/cc753580.aspx
    Regarding GPP ILT, the following article can be referred to for more information.
    Preference Item-Level Targeting
    http://msdn.microsoft.com/en-us/library/cc733022.aspx
    Best regards,
    Frank Shen

  • Impersonation based on security groupe dosent work Exchanfge 2013 sp1 ru 5

    New-ManagementScope -Name:mcscope -RecipientRestrictionFilter {MemberOfGroup -eq "cn=Securitygroupe,ou=temp,dc=contoso,dc=com"}
    when i use the management scope in a New-ManagementRoleAssignment , the users that is in the security groupe
    impersenation does not Work..
    the impersenation is for crm 2013 ..
    wil be nice if i can get som help on this one :-)
    TNX

    Hello,
    Thank you for your post.
    This is a quick note to let you know that we are performing research on this issue.
    If you have feedback for TechNet Subscriber Support, contact
    [email protected]
    Simon Wu
    TechNet Community Support

  • Restricting rights based on MD Group?

    I have several MD groups and several user groups. I want certain user groups to be able to only edit certain MD groups, but see the value of the others. As far as I can tell, Metadata Sets are the only thing that show up under the permission set editor.
    Any suggestions?

    Brian:
    Metadata Sets are only the way to restrict editing of Metadata.
    Nicholas Stokes
    XPlatform Consulting
    <Edited by Host>

  • In UCM, How to setup Security Group based conversion of PS files?

    Hello, everyone.
    Some of my PS Format files need converted to PDF format, some do not. So, I created group 1 and group 2 in the security group. And installed gs8.54 and PDFc components.
    The present result (situation) is all the PS format files are converted into PDF, but I would like that the ps format files in group 1 can be converted by selecting Distiller, the ps format files in group 2 can not be converted by selecting PassThru.
    Who can tell me how to create content server filters and configure the conversion based on security groups?
    Thank you very much!
    By the way, my mother tongue is not English. So please use simple English as possible as you can. Thanks!

    Hi
    The best possible way to get this requirement done is to use SelectivelyRefineandIndex component. With this component you can create conditions and put it in the resource file for the component such that we can have only contents that are checked in to Sec Grp 1 be sent to refinery and those not belonging to this will not be sent.
    The same way one can also create conditions to FullText index contents or not based on any condition that is put in the resource file for this component.
    I believe you should be able to get the requirement sufficed with this component .
    More details are at :
    http://www.oracle.com/technology/products/content-management/ucm/samples/selectivelyrefineandindex-20080515-5.zip
    Just go through the readme with the component and you will be able to get going with this component.
    Hope this helps
    Thanks
    Srinath

  • Creating Dependent List on Security Group.

    Hi,
    I want to create dependent list on Security group, i have created custom table, Relation and view on Security group and on my custom table.
    I am not getting dependent list as it should be dependent on security group.
    Please help me.

    See my post Re: How to change the values in custom profiles based on security group ??

  • How to restrict an infopath custom view based on SharePoint group or security group membership?

    Hi,
    I have created a custom view in InfoPath Designer 2013 based on a SharePoint online - custom list.
    Right now the custom view is available for all users in the "View:" dropdown under the "PAGE DESIGN" tab in InfoPath.
    I would like to make this view available only to a set of users. (i.e., users of a SharePoint group / Security group).
    Please let me know how I can do this..
    Thanks,
    Thanan

    Hi Thanan,
    We can use check the current user permission using REST API in SharePoint 2013, then hide the dropdown the "View" base on the permission.
    The following articles for your reference:
    SP2013 REST API – Find if user is member of SharePoint group
    http://simonovens.wordpress.com/2014/08/13/sp2013-rest-api-find-if-user-is-member-of-sharepoint-group/
    Quick Tip: Using JQuery to hide options in a select
    https://formidablepro.com/help-desk/quick-tip-using-jquery-to-hide-options-in-a-select/
    Best Regards
    Patrick Liang
    TechNet Community Support

  • Restricted Access in Compensation Workbench based on Security Profile

    Customer does not want the HR Professional to access at other team's data even when using Switch Manager in the below scenario.
    1) 2 CWB Plans (CWB Plan for A, CWB Plan for B) are built based on Supervisor Hierarchy. Each of the CWB plan is for a set of organisations for e.g a plan for Organisation 'A' and another for Organisation 'B'.
    2) HR Professionals have a security Profile which restricts them to view employees in either 'A or 'B' organisation.
    3) Switch Manager is enabled for the 'Compensation Workbench Administrator'
    4) There exists a common manager who manages people from 'A' and from 'B'
    5) When HR Professional (who is in the A organisation) switches as the Manager in point (4), he gets to see the details of the 'CWB Plan for B' along with the 'CWB Plan for A' even though the people in the B plan are not part of the HR Professional's security Profile

    Hi,
    Thanks alot. its working fine
    Can we configure DCL Relation two times in one information filed ??? i should not create not more than fields to this requirement.
    Type -> subtype = DCL already existed
    Now, i want to Create DCL to
    Subtype ---> Security group
    As per my requirement, if i change the security group in checkin form, values should be change in the SubType drop down list.
    Created checkin profile there was DCL relation to " Type and "Sub Type" . now i want to map Relation ( DCL ) for subtype to security group.
    i was trying do for DCL for subtype and security group. but there was already existing DCL created for subtype information field (Relation configuration done for content type). even though i was trying to do for DCL in Security group information field. but, i could not find security group information field in configuration manager.
    Now what should i do ?? how to create DCL to subtype and security group ??
    Help would be appreciated.
    yt

  • My deployed printers don't appear on the computers that are part of the security group

    I use the Print Management role to deploy my printers to my users.
    Because I only want those printers to appear on certain laptops/servers, I deployed them using the “Per machine GPO”
    I created an “Office Printers” security group that contains those laptops/servers
    I use this security group to filter my GPO (under Security Filtering)
    The above used to work but after modifying and adding new printers, the printers are not getting deployed anymore.
    Here is what I see:
    - On the laptops/servers I am connecting to (I am the Domain Admin), I can see all the printers
    - On some user’s machine, no printers shows
    - On some user’s machine, only the printers that were listed in GPO before the changes do show
    gpresults –r shows different result:
    - Mine shows: Filtering : Denied (Security) even I see the printers
    - Some machines show: Filtering:  Not Applied (Unknown Reason)
    - Some machines don’t show the GPO at all

    Hi,
    Before posting my question, i ran gpresult /force and rebooted the machines several times.
    I resolved my issue yesterday by "chance":
    - since the deployment was failing using the deploy to GP feature in Print Management, I decided to try to deploy them by using directly GPMC.
    - I discovered that the printer that I added few days ago was not marked as "shared" (I did not think that it was an issue because I assumed that the Print Management did not need this setting to be set). Since the others were shared, I decided to share
    this one as well.
    >>>> that resolved the issue: the printers appeared on all the machines as expected.
    I feel that MS should look into this behavior:
    - Deployment of the printers should not fail if one is not shared
    - if sharing is a must to use this feature, deploying the printer from the Print Management should bring an error.
    Thanks
    Christophe

  • Populate the EmployeeID attribute of a user, based on their security group membership in Active Directory

    Hey guys, I need to create a script that assigns a value to the EmployeeID of every user that is a member of a particular AD security group.
    For example, there are the following groups - Accounting_01, Accounting_02, Accounting_03. The script has to read what members there are in these groups and assign to the people of Accounting_01 an EmployeeID of 01, to the people of Accounting_02 an EmployeeID
    of 02, and to the people of Accounting_03 an EmployeeID of 03.
    I have a script that adds a user to a security group, based on the value of a certain attribute, but not the other way around. Have you written such a script? Thanks in advance

    I haven't tried the code, because I don't have AD cmdlets.
    But I see some discrepancies between the documentation and your code.
    Looking at http://technet.microsoft.com/en-us/library/hh852287.aspx (Set-ADUser cmdlet) we can read for the
    -Replace<Hashtable> parameter: ... Use this parameter
    to replace one or more values of a property that cannot be modified using a cmdlet parameter ...
    But the OP referred to EmployeeID, which is a Set-ADUser cmdlet parameter (look for -EmployeeID),
    thus, cannot be used with -Replace<Hashtable> parameter (as per the documentation).
    Also, the documentation states for this same
    -Replace<Hashtable> parameter: ... To modify
    an object property, you must use the LDAP display name ...
    And the LDAP display name for EmployeeID is employeeID, and not employeeid as in your code (although I'm
    not sure if LDAP display name
    is case sensitive).
    As you say your code works correctly, I
    suspect that you created a new property named employeeid, which is not the same referenced by the parameter
    -EmployeeID.
    The documentation merely says that it can be used to modify attributes that do not have their own parameter. If they were to include a parameter for every AD attribute the list would be huge. It doesn't imply that -replace cannot be used instead of the defined
    parameters.
    I must admit that I didn't realise that -EmployeeID could be used as I didn't consult the documentation before I wrote the code but I can confirm that using the method I posted the employeeID attribute was modified. It didn't create a second attribute with
    different letter casing.

Maybe you are looking for

  • Flash content is making my Adobe Acrobat X to crash (how to disable flash in the PDF documents?)

    Hello I have Adobe Acrobat X, and I have a PDF document of around 700 pages. Inside, I have several pages I've downloaded from different websites, some of these pages have flash animations (I mean adverts with flash), when I click in a certain page o

  • CRM UI Translation: Search does not show Business Partners in Spanish

    Hi, I have customized SMAD, SMCR, SMHF, SMMJ to Y* space. The customer needs to use system in Spanish - > language pack installed. Hence I logged in using Spanish and translated the Business partner fields etc in SPRO. Everything is okay in the Creat

  • Getting Graphic to Follow Video

    Basically what I'm trying to accomplish is to have a smily face cover my 2-year-old son's privates as he's dancing around. I know how to use the "Ken Burns" effect in FCE, but never attempted to coordinate movement of a still image superimposed on vi

  • Dynpro - Subscreen area

    Hello , I have to display error message or resultats of querry in subscreen area or sub screen  of main  screen . Could someone tell me how to push them (results , messages )to right place . Thank you Krsto

  • Duplicate IN parameters for PreparedStatement

    I have a prepared statement like "SELECT a FROM b WHERE c =? UNION SELECT d FROM e WHERE f =?" In this case I will always want to both parameters to be the same. My code currently has two lines:- preparedStatement.setString(1, value); preparedStateme