My question is that I am trying to prevent local users (limited
account types) from printing ? What might be the easiest way to do
this on a Windows XP Pro computer ? The printer is attached to
directly to the computer. I want to be able to prevent all users
except for the account for the administrator to be able to print.

Thanks in advance

From: "Blue Sky" <(E-Mail Removed)>

| My question is that I am trying to prevent local users (limited
| account types) from printing ? What might be the easiest way to do
| this on a Windows XP Pro computer ? The printer is attached to
| directly to the computer. I want to be able to prevent all users
| except for the account for the administrator to be able to print.
|
| Thanks in advance

Don't install local printers.
Setup printers on Print Servers and print through Queues and use access control privileges.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

"Blue Sky" <(E-Mail Removed)> wrote in message
news:d0cb35e8-5a29-4e1d-a942-(E-Mail Removed)...
> My question is that I am trying to prevent local users (limited
> account types) from printing ? What might be the easiest way to do
> this on a Windows XP Pro computer ? The printer is attached to
> directly to the computer. I want to be able to prevent all users
> except for the account for the administrator to be able to print.
>
> Thanks in advance

I don't think there is an easy way. If you can set the group
policy (via gpedit.msc) so that it causes each logon event
to be recorded in the Event Logger, and if you can identify
by name the users that are not supposed to print then it is
possible to run a script in the background that monitor the
Event Logger and will either start or stop the print service,
thus enabling or disabling printing.

On Mar 5, 2:01*pm, "David H. Lipman" <DLipman~nosp...@Verizon.Net>
wrote:
> From: "Blue Sky" <wtb_pa...@hotmail.com>
>
> | My question is that I am trying to prevent local users (limited
> | account types) from printing ? What might be the easiest way to do
> | this on a Windows XP Pro computer ? The printer is attached to
> | directly to the computer. I want to be able to prevent all users
> | except for the account for the administrator to be able to print.
> |
> | Thanks in advance
>
> Don't install local printers.
> Setup printers on Print Servers and print through Queues and use access control privileges.
>
> --
> Davehttp://www.claymania.com/removal-trojan-adware.html
> Multi-AV -http://www.pctipp.ch/downloads/dl/35905.asp

Thanks David. The idea of not installing local printers sounds like
the easiest way to go.

On Mar 5, 3:45*pm, "Pegasus \(MVP\)" <I....@fly.com.oz> wrote:
> "Blue Sky" <wtb_pa...@hotmail.com> wrote in message
>
> news:d0cb35e8-5a29-4e1d-a942-(E-Mail Removed)...
>
> > My question is that I am trying to prevent local users (limited
> > account types) from printing ? What might be the easiest way to do
> > this on a Windows XP Pro computer ? The printer is attached to
> > directly to the computer. I want to be able to prevent all users
> > except for the account for the administrator to be able to print.
>
> > Thanks in advance
>
> I don't think there is an easy way. If you can set the group
> policy (via gpedit.msc) so that it causes each logon event
> to be recorded in the Event Logger, and if you can identify
> by name the users that are not supposed to print then it is
> possible to run a script in the background that monitor the
> Event Logger and will either start or stop the print service,
> thus enabling or disabling printing.

Thanks for the reply. Just for the sake of learning.... and to
clearify would you be saying that if I was to run a script for each
logon and in the script I would check for the credentials of the user
signing in and then disabling or enabling the print service ?

On Wed, 5 Mar 2008 12:55:00 -0800 (PST)
Blue Sky <(E-Mail Removed)> wrote:

> My question is that I am trying to prevent local users (limited
> account types) from printing ? What might be the easiest way to do
> this on a Windows XP Pro computer ? The printer is attached to
> directly to the computer. I want to be able to prevent all users
> except for the account for the administrator to be able to print.
>
> Thanks in advance

You could do so by setting permissions on the parport.sys under the
%systemroot%\system32\drivers.
find parport.sys, remove the users group from the permission list.
The same way you can block people from using USB, cd-rom etc.
To find which drivers are used by each device, go to your hardware
manager, open a an item, driver details, and see which file is used and
it's location.
ugly but works ;-).

--
Live & let live, or leave.
:-)

"Blue Sky" <(E-Mail Removed)> wrote in message
news:0fe95301-3864-4a85-b92f-(E-Mail Removed)...
On Mar 5, 3:45 pm, "Pegasus \(MVP\)" <I....@fly.com.oz> wrote:
> "Blue Sky" <wtb_pa...@hotmail.com> wrote in message
>
> news:d0cb35e8-5a29-4e1d-a942-(E-Mail Removed)...
>
> > My question is that I am trying to prevent local users (limited
> > account types) from printing ? What might be the easiest way to do
> > this on a Windows XP Pro computer ? The printer is attached to
> > directly to the computer. I want to be able to prevent all users
> > except for the account for the administrator to be able to print.
>
> > Thanks in advance
>
> I don't think there is an easy way. If you can set the group
> policy (via gpedit.msc) so that it causes each logon event
> to be recorded in the Event Logger, and if you can identify
> by name the users that are not supposed to print then it is
> possible to run a script in the background that monitor the
> Event Logger and will either start or stop the print service,
> thus enabling or disabling printing.

Thanks for the reply. Just for the sake of learning.... and to
clearify would you be saying that if I was to run a script for each
logon and in the script I would check for the credentials of the user
signing in and then disabling or enabling the print service ?

=========

Running the script at logon time is unlikely to work, because
to disable/enable the print service requires administrative
privileges, which the user would not have. Anyway, here
are the commands:
net start "print spooler"
net stop "print spooler"

Pegasus (MVP) wrote:

> "Blue Sky" <(E-Mail Removed)> wrote in message
> news:0fe95301-3864-4a85-b92f-(E-Mail Removed)...
> On Mar 5, 3:45 pm, "Pegasus \(MVP\)" <I....@fly.com.oz> wrote:
>
>>"Blue Sky" <wtb_pa...@hotmail.com> wrote in message
>>
>>news:d0cb35e8-5a29-4e1d-a942-(E-Mail Removed)...
>>
>>
>>>My question is that I am trying to prevent local users (limited
>>>account types) from printing ? What might be the easiest way to do
>>>this on a Windows XP Pro computer ? The printer is attached to
>>>directly to the computer. I want to be able to prevent all users
>>>except for the account for the administrator to be able to print.
>>
>>>Thanks in advance
>>
>>I don't think there is an easy way. If you can set the group
>>policy (via gpedit.msc) so that it causes each logon event
>>to be recorded in the Event Logger, and if you can identify
>>by name the users that are not supposed to print then it is
>>possible to run a script in the background that monitor the
>>Event Logger and will either start or stop the print service,
>>thus enabling or disabling printing.
>
>
> Thanks for the reply. Just for the sake of learning.... and to
> clearify would you be saying that if I was to run a script for each
> logon and in the script I would check for the credentials of the user
> signing in and then disabling or enabling the print service ?
>
> =========
>
> Running the script at logon time is unlikely to work, because
> to disable/enable the print service requires administrative
> privileges, which the user would not have. Anyway, here
> are the commands:
> net start "print spooler"
> net stop "print spooler"
>
>

One could run "NET STOP spooler" as a boottime Task with an ADMIN
account, and then only an Admin could restart it after login.

On Thu, 06 Mar 2008 08:07:52 -0600
Bob I <(E-Mail Removed)> wrote:

> One could run "NET STOP spooler" as a boottime Task with an ADMIN
> account, and then only an Admin could restart it after login.

I like that too!

--
Live & let live, or leave.
:-)

Blue Sky <(E-Mail Removed)> wrote in news:d0cb35e8-5a29-4e1d-a942-
(E-Mail Removed):

> My question is that I am trying to prevent local users (limited
> account types) from printing ? What might be the easiest way to do
> this on a Windows XP Pro computer ? The printer is attached to
> directly to the computer. I want to be able to prevent all users
> except for the account for the administrator to be able to print.
>
> Thanks in advance
>

Go to the printer properties and set the permissions under the security tab
so that only the administrator can print. You likely want to remove the
"everyone" and "power users" entries, and leave the "administrators" one.

The "CREATOR OWNER" one should be left at its default (manage documents) -
it allows whoever created a print job to do things like delete it if there
is an error.