Last Updated on 2019-08-03.
[:en]
Scenario
Local printers are deployed via central GPP to your domain’s workstations.
Some printers should not be used by certain users, but users should be able to switch workstations quickly,
Solution
Open Windows Print Management on a local workstation where the certain printer is installed.
Modify the permissions according to your needs.
The both special permissions should stay there. E.g. only delete the “everyone” permission and replace it with a stricter one.
Open RegEdit with administrative permissions and open this key item:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\<PRINTER NAME>\Security
The “security” item contains binary information about the printer’s permission.
You can either export it via RegEdit into a .reg file which you can distribute manually, or you import it into your central GPO, e.g. via the registry item assistant to avoid issues with the binary data (the wizard allows to import the item from your remote station).
Reference[:]