Shulou(Shulou.com)06/01 Report--

In this issue, the editor will bring you about how to skillfully use group strategies to make network printing more efficient. The article is rich in content and analyzed and described from a professional point of view. I hope you can get something after reading this article.

Security management needs to be prevented step by step, how to skillfully use group policy to make network printing more efficient? A detailed description is given in this paper.

Using printer in local area network can not only effectively save printing cost, but also greatly improve printing efficiency. However, due to the openness of the network, the management of network printers is not as convenient as that of local printers. To this end, many printing users carefully summed up and found many secrets that can efficiently manage network printers, and the author is no exception. This is not, the author below from the system group policy settings, to recommend to you a few efficient management of network printer efficiency, I hope to be useful to all friends!

Beware of network printers being "stolen"

By default, any user can easily find all network printers in the LAN through the "Browse Printer" function in the "add Printer" wizard window; if any printer does not take security measures, any user can secretly install these network printers locally, and the "owner" of the printer may not know about it. In this way, network printers are in danger of being used illegally. In order to avoid this danger, is there any way to make it impossible for ordinary users to easily find all the installed printers on the network by browsing the Internet? The answer is yes, we can follow these steps:

Click the start / run command, open the system's run dialog box, enter the group policy editing command "gpedit.msc", click the "OK" button, and open the system's group policy editing interface

In the left area of the interface, double-click the user configuration / Administrative templates / Control Panel / printers folder one by one, in the window area to the right of the corresponding printers folder, select the Browse the Network to find printers option, and right-click it, execute the Properties command from the pop-up right-click menu to open the property settings window shown in figure 1 Select the "disabled" option in this window, and then click the "OK" button, so that the "Browse Printer" option will not appear in the "add Printer" wizard window. then other ordinary users will not be able to easily find the target network printer that needs to be installed through the network unless he knows the detailed path information of the target printer.

Figure 1

Tip: if we do not configure the "browse the network to find printers" option, the system will automatically enable the network browsing feature, allowing users to browse the network to find any printer in the local area network. Of course, even if we disable the "browse the network to find printers" option, users can still search for printers on the local area network in other ways and share the installation of printers without permissions.

Prevent network printers from being "secretly deleted"

In general, any user can delete printers installed on the local system at will through the control panel window of the local computer But in this way, it will bring a threat to the safety of the printer, because if the owner of the computer leaves the computer for a while, and it happens that other "saboteurs" take the opportunity to enter the control panel window of the local system, if the local network printer is "secretly" deleted, the owner of the computer will not be able to use the network printer to share printing in the future. In view of this, we can use the following setup steps to prevent the network printer from being "secretly" deleted by other users through the control panel window:

Click the start / run command, open the system's run dialog box, enter the group policy editing command "gpedit.msc", click the "OK" button, and open the system's group policy editing interface

In the left area of the interface, double-click the user configuration / Administrative templates / Control Panel / printers folder one by one, and in the window area to the right of the corresponding printers folder, select the prevent Printer deletion option. and right-click it, execute the Properties command from the pop-up right-click menu, and select the enabled option in the subsequent property settings window Click the "OK" button again, so that when other illegal elements open the control panel window of the local system and try to secretly delete the network printer installed in the local computer, the system will automatically pop up the prompt interface shown in figure 2, warning that the illegal element does not have the authority to delete the network printer at will, so that the local network printer can be effectively protected.

Figure 2

Tip: even if we enable the "prevent printers from being deleted" option, this option will be powerless if illegal elements delete locally installed network printers in other ways!

Forcibly prevent the use of network printers

In the computer with Windows 2003 or Windows XP installed, we can enable the built-in firewall to protect the security of the local system, and when we want to use the network printer in the LAN, we can select the "file and printer sharing" option in the firewall settings page shown in figure 3, so as to ensure that the system uses the network printer under the security protection of the firewall. However, sometimes in order to completely prevent network printing, we do not want ordinary users to set the "file and printer sharing" feature of Windows's built-in firewall so that they can easily surpass the firewall restrictions to achieve network printing. To do this, you can follow the following steps:

Figure 3

Click the start / run command, open the system's run dialog box, enter the group policy editing command "gpedit.msc", click the "OK" button, and open the system's group policy editing interface

In the left area of the interface, double-click the computer configuration / Administrative templates / Network / Network connections / Standard profile folder one by one, in the window area to the right of the corresponding Standard profile, select the Windows Firewall: allow File and Printer sharing exceptions option, and right-click it to execute the Properties command from the pop-up right-click menu Select the disabled option in the subsequent property settings window, and then click the OK button, so that even if other users want to enable File and Printer sharing, when they open the firewall settings page shown in figure 3 again, they find that File and Printer sharing has become unselectable. In this way, we can really achieve the goal of "forcibly" preventing the use of network printers.

Prevent remote "remote" network printers

As we all know, under the conditions of permission and through appropriate settings, users can "remotely" manage the designated network printer through the IE browser window on any computer with Internet access, such as checking the technical parameters and working status of the target printer, sending printing tasks to the printer, or remotely installing the network printer. Although this way of remote control can greatly improve the management efficiency of network printers, it also poses a threat to the safe use of network printers; is there any way to stop ordinary users from managing printers or printing directly through the IE browser window? The answer is yes, you can follow these steps to prevent remote "remote" network printers:

Click the start / run command, open the system's run dialog box, enter the group policy editing command "gpedit.msc", click the "OK" button, and open the system's group policy editing interface

Figure 4

In the left area of the interface, double-click the computer configuration / Administrative templates / printers folder one by one, in the window area to the right of the corresponding printers folder, select the WEB-based printing option, and right-click it, execute the Properties command from the pop-up right-click menu, and select the disabled option in the subsequent figure 4 window Click the OK button again so that no one can remotely "remotely" the network printer through the IE browser window.

Beware of random installation of network printers

To install a network printer, you can do it either through the "add Printer" wizard in the control panel window or remotely through the IE browser window. Therefore, in order to prevent ordinary users from randomly installing network printers on their local computers, we must also do so in the following two ways:

If we want to prevent ordinary users from installing network printers through the add Printer wizard in the control panel window, we can first click the start / run command to open the system's run dialog box, enter the group policy editing command "gpedit.msc" in it, and click the "OK" button to open the system's group policy editing interface. Then, in the left area of the interface, double-click the user configuration / Administrative templates / Control Panel / printers folder one by one, and in the window area to the right of the corresponding printers folder, select the prevent adding printers option. And right-click it, execute the Properties command from the pop-up right-click menu, and select the enabled option in the pop-up figure 5 window. Click the OK button again, so that when other illegal elements open the control panel window of the local system and try to install the network printer through the add Printer wizard, the system will automatically pop up a warning that you have no right to install.

Figure 5

If we want to prevent ordinary users from installing network printers remotely through the "add printers" function in the IE browser window, we can first open the system's group policy editing window as described above, and then double-click the user configuration / Administrative templates / Control Panel / printers folder one by one in the window area to the right of the corresponding printers folder. Select the "Browse shared Web site to find printers" option, right-click it, execute the "Properties" command from the right-click menu that pops up, select the "enabled" option in the interface that follows, and then click the "OK" button, so that when ordinary users remotely control a network printer through the WEB page, they will not find the "add Printer" option from that page. In this way, the goal of preventing the installation of network printers can be achieved.

Skillful use of group policy makes network printing more efficient and makes the network more secure.

The above is what the editor shares with you on how to skillfully use group policies to make network printing more efficient. If you happen to have similar doubts, please refer to the above analysis to understand. If you want to know more about it, you are welcome to follow the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.