In this lab, I will show you how to deploy a shared printer in Windows 2012 R2 using Group Policy. Only users that are allowed to print will see the printer listed on their computers. For the purpose of this lab, assume that the DHCP scope for the network functions properly.
First, turn on the target printer to obtain an IP address dynamically. In this lab, I will assume that the printer obtains an IP address of 10.0.0.70.
Access printer configuration web page to set the desired IP address for the printer. Make s
Ping –t 10.0.0.70 from the server to ensure you can ping the printer.
On the server, open Devices and Printers, choose Add Printer using IP address, then share it out.
Launch dsa.msc, create an OU and move any users who have access to the printers there.
Launch GPMC.MSC, in GPO editor, add a GPO to link to the above OU.
Navigate to Computer Configuration, Policies, Administrative Templates, Control Panel, and then Printers.
Right-click Point and Print Restrictions, and then click Properties.
Clear the following check boxes:
- Users can only point and print to these servers
- Users can only point and print to machines in their forest
In the When installing drivers for a new connection box, select Do not show warning or elevation prompt.
Scroll down, and in the When updating drivers for an existing connection box, select Show warning only. Do not show warning or elevation prompt
In Print Management, deploy the printer using the newly created GPO. List printer in Directory.
Ensure that in the Security tab, the user can print, the everyone group is removed.
Right-click and deploy the printer. Choose the correct GPO, remember to click the Add button.
On Server, type gpupdate /force
On Client, type gpupdate /force
Print test page.