Petri IT Knowledgebase Forums
 

Petri.co.il forums Home Forums Start Page Forums Frequently Asked Questions FAQ Member List Members List
Go Back   Petri IT Knowledgebase Forums > Server Operating Systems > Windows Server 2000 / 2003
Petri.co.il is happy to award auglan the title of Most Valuable Member !!!
Register Calendar Calendar Search Petri IT Knowledgebase Forums Search Todays Posts Today's Posts Mark Forums Read

Notices

How to prevent user connect to printer using TCP/IP port?

How to prevent user connect to printer using TCP/IP port?

this thread has 5 replies and has been viewed 3188 times

Closed Thread
 
Thread Tools Search this Thread Display Modes
  #1  
Old 17th January 2009, 05:16
angus203 angus203 is offline
Casual
Casual
 
 Join Date: Aug 2008
  6 month star 12 month star
 Posts: 41
 Reputation: angus203 is on a distinguished road (10)
Default How to prevent user connect to printer using TCP/IP port?

In my case, the networks already have been a network printer.

How to control all users must use network printer and deny user connect to printer using TCP/IP port?
  #2  
Old 18th January 2009, 01:55
gforceindustries's Avatar
gforceindustries gforceindustries is offline
Senior Member
Wrote the book
 
 Join Date: Sep 2008
  6 month star 12 month star
 Location: Leics, UK
 Posts: 4,342
 Reputation: gforceindustries is a jewel in the roughgforceindustries is a jewel in the roughgforceindustries is a jewel in the roughgforceindustries is a jewel in the rough (305)
Default Re: How to prevent user connect to printer using TCP/IP port?

Are your client workstations running OS/2? If not, tell us more about your setup and maybe someone can help you. Right now, all we know is that you have networked printers, and we have to assume that you have posted in the right place and therefore have servers running either 2000 or 2003. http://support.microsoft.com/?kbid=555375
__________________
Gareth Howells

BSc (Hons), MBCS, MCP, MCDST, ICCE

Any advice is given in good faith and without warranty.

Please give reputation points if somebody has helped you.

"For by now I could have stretched out my hand and struck you and your people with a plague that would have wiped you off the Earth." (Exodus 9:15) - I could kill you with my thumb.

"Everything that lives and moves will be food for you." (Genesis 9:3) - For every animal you don't eat, I'm going to eat three.
  #3  
Old 18th January 2009, 09:29
Garen Garen is offline
Users Awaiting Email Confirmation
Someone to look up to
 
 Join Date: Nov 2007
  6 month star 12 month star
 Posts: 751
 Reputation: Garen will become famous soon enoughGaren will become famous soon enough (147)
Default Re: How to prevent user connect to printer using TCP/IP port?

You can set an ACL on the switch so the port the printer is connected to only allows traffic from the server that is setup as the print queue.
  #4  
Old 18th January 2009, 10:05
ahinson's Avatar
ahinson ahinson is offline
Moderator
 
 Join Date: Mar 2004
  6 month star 12 month star
 Location: Orlando, FL
 Posts: 1,821
 Reputation: ahinson is just really niceahinson is just really niceahinson is just really niceahinson is just really niceahinson is just really nice (440)
Default Re: How to prevent user connect to printer using TCP/IP port?

Simple. Client machines exist in a different network (subnet) than the printers. The server has 2 network adapters. One to communicate with clients and the other to the printers.
__________________
Andrew Hinson
http://www.clinlabinc.com

** Remember to give credit where credit is due and leave reputation points where appropriate **
  #5  
Old 18th January 2009, 13:08
Wired's Avatar
Wired Wired is offline
Administrator
 
 Join Date: May 2006
  6 month star 12 month star
 Posts: 3,169
 Reputation: Wired is just really niceWired is just really niceWired is just really niceWired is just really nice (384)
Default Re: How to prevent user connect to printer using TCP/IP port?

I'd do a combination of what's been posted so far. Place the printers and the computers on different subnets, and block the PC subnet from communicating with the printer subnet. Make sure the server can communicate with the printer of course by being on a subnet that CAN communicate with the printer subnet.
__________________
** Remember to give credit where credit is due and leave reputation points where appropriate **
  #6  
Old 18th January 2009, 13:13
Ossian Ossian is offline
Administrator
 
 Join Date: Nov 2003
  6 month star 12 month star
 Location: Bonnie Scotland
 Posts: 15,116
  Send a message via Skype™ to Ossian
 Reputation: Ossian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud of (1300)
Default Re: How to prevent user connect to printer using TCP/IP port?

Assuming it is a Windows domain, you can use group policy to deny users the ability to map local printers (which is what a direct TCP/IP connection appears as) and only allow them to connect to network printers, i.e. shares on a print server

You could also look at TCP/IP filtering in the network connections of the clients
__________________
Tom Jones
MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
PhD, MSc, FIAP, MIITT
IT Trainer / Consultant
Ossian Ltd
Scotland

** Remember to give credit where credit is due and leave reputation points where appropriate **
Closed Thread


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
how to enable tcp port 5631 5632 dmourghen Cisco Routers & Switches How-to 4 21st September 2008 19:18
Standard User Connect To Shared Printer username/password always needed Vista Home cmec123 Windows Vista 2 6th September 2007 10:29
OMA need TCP port 80 ? ericwi Exchange 2000 / 2003 1 31st July 2007 14:38
SMTP VS TCP listen port can not be changed from 25 Carl Farrington Exchange 2000 / 2003 3 4th April 2007 15:23
Printer can't connect unless given the same TS port? Medde Terminal Services 1 13th August 2005 23:31


All times are GMT +3. The time now is 16:22.

Steel Blue 3.5.4 vBulletin Style ©2006 vBEnhanced
Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
 

Valid XHTML 1.0!   Valid CSS!

Copyright 2005 Daniel Petri