Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Printers for all users visible on Remote Desktop Server


  • Please log in to reply
13 replies to this topic

#1 nickolas80

nickolas80

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:11:44 PM

Posted 09 April 2016 - 01:59 PM

Hello,

We currently run an RD farm with 5 RD hosts.  Users are distributed to the hosts based on load balancing.

When someone logs into any of the 5 servers, they can not only see the printers they've mapped, but printers other users (on the same host) have mapped.  It will even show duplicates.

For instance:

User A logs in and maps Printer 1

User B logs in and maps Printer 2

-At this point both User A and B can see both Printers 1 and 2.

User C logs in and maps Printer 1

-All 3 users now see 2 copies of Printer 1, and Printer 2.

Is there any way to hide other users printers, so each user ONLY sees the printers they themselves have mapped?

 

Thank you,

Nickolas



BC AdBot (Login to Remove)

 


#2 Sneakycyber

Sneakycyber

    Network Engineer


  • BC Advisor
  • 6,107 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Ohio
  • Local time:01:44 AM

Posted 09 April 2016 - 11:16 PM

What are you using for a terminal server or RD session host?

Chad Mockensturm 

Systems and Network Engineer

Certified CompTia Network +, A +


#3 sflatechguy

sflatechguy

  • BC Advisor
  • 2,200 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:44 AM

Posted 10 April 2016 - 10:57 AM

Are these network printers, or printers connected to the clients being used to connect via RDP?



#4 nickolas80

nickolas80
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:11:44 PM

Posted 11 April 2016 - 11:54 AM

SneakyCyber - I'm not sure I understand your question.  Terminal Servers and the RD Session host are both 2012 R2.

 

sflatechguy - These are network printers.  The print server is Server 2012 R2 file server.



#5 JohnnyJammer

JohnnyJammer

  • Members
  • 1,117 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:QLD Australia
  • Local time:03:44 PM

Posted 11 April 2016 - 04:30 PM

Thats because you have printer re-direction enabled mate.

So you will see the printer on the server and a redirect printer as well as other printers belonging to the people from another group.

 

You need to disable printer redirection or disable print drivers on the actual RD host mate.

Depends where the printers are located.



#6 IT_Regina

IT_Regina

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:07:44 AM

Posted 21 June 2016 - 10:46 AM

Hello to everybody,

 

to prevent this behavior I use a 3rd-party Software named Slimprinter. This software is mapping the Printers (selection printer by printer is possible) of the clientmachines without using the rdp-mapping feature. The presence of printerdrivers at serverside is not needed.

I use this Software since several years with success.

 

Best reagrds

Regina



#7 androbourne

androbourne

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:12:44 AM

Posted 27 June 2016 - 01:20 PM

Yes, printer redirection would be the problem. It is also highly recommended not to use printer redirection EVER. (including turning it off in RDP connection settings)

 

Best way to manage printer deployment is with gpo and print management roles.

 

To properly resolved the issue I would do the following:

 

1. Delete all printers from all profiles

(can be done with scripts, if they are deployed through a GPO now, it will remain there even after GPO has been removed since it was an installation)

 

2. Verify all the printers are installed directly on your print management server, test them all and rename if you feel to do so.

(can be installed the DC, file server etc... doesn't matter where as long as it has access to replicate from GPO server)

 

3. Create a blank GPO called "printer deployment"

 

3. Install Print Management Role

 

4. Configure Printer Management role by user

 

  • Open print management and select "installed printers"
  • Select the printer you want to deploy
  • Select "deploy printer using GPO"
  • Select "printer deployment" GPO
  • Check box "per user"
  • Select "Apply"
  • Verify it is now being displayed under "deployed printers"

 

Perform that above steps for all printers you want to deploy. This will deploy all printers install on printer manager server to all users, however it wont be based on which user\machine is on or offline since the printers are installed and coming from the server directly. Server or the printer would have to be offline for printing to not function.


Edited by androbourne, 27 June 2016 - 01:23 PM.


#8 IT_Regina

IT_Regina

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:07:44 AM

Posted 28 June 2016 - 03:59 PM

This may be possible inside a domain. For Users on computers wich dosn't belong to the domain it is nor possible.

Printermapping via Slimprinter is the possible solution.

If the terminalservers located inside a data center by a serviceprovider it is not recommended to connect the local printers to a printserver inside the datacenter, Small bandwith between the clients an the printserver may cause additional problems.

Slimprinter sends only a strong compressed deviceindepent datastream from printing application to the client. That is more performant as any other method.

 

Regards IT_Regina



#9 JohnnyJammer

JohnnyJammer

  • Members
  • 1,117 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:QLD Australia
  • Local time:03:44 PM

Posted 28 June 2016 - 07:52 PM

This may be possible inside a domain. For Users on computers wich dosn't belong to the domain it is nor possible.

Printermapping via Slimprinter is the possible solution.

If the terminalservers located inside a data center by a serviceprovider it is not recommended to connect the local printers to a printserver inside the datacenter, Small bandwith between the clients an the printserver may cause additional problems.

Slimprinter sends only a strong compressed deviceindepent datastream from printing application to the client. That is more performant as any other method.

 

Regards IT_Regina

But you would just create a batch file using the (C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup, and or task scheduler for LOGON event ID) location for example to map locally using the net use \\printer01 command.

You can also edit the registry so it does not use printer redirection or use a local GPO to do it.


Edited by JohnnyJammer, 28 June 2016 - 07:53 PM.


#10 IT_Regina

IT_Regina

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:07:44 AM

Posted 29 June 2016 - 01:31 AM

Please read all!

You can only map printers per 'net use' if they addressed in the same net. Via rdp you are able to connect to any terminalserver outside of your network too. Then your methods will fail.



#11 JohnnyJammer

JohnnyJammer

  • Members
  • 1,117 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:QLD Australia
  • Local time:03:44 PM

Posted 29 June 2016 - 02:32 AM

Please read all!

You can only map printers per 'net use' if they addressed in the same net. Via rdp you are able to connect to any terminalserver outside of your network too. Then your methods will fail.

LOL you do know IP printers can infact be printed from any network 0.0.0.0*/32 over the whole internet dont you?

Portforward and set authentication to use token or domain auth, hell even some use forms for authentication. So yes i could use net use \\printername if i wanted to and print from all over the world or i could share that globally using IP and dns records as one Hillary Clinton did (Its a silly move) but its possible.

 

So to reiterate, mapping printers using a SMB packet can work on any subnet including non classfull IP Subnets!



#12 IT_Regina

IT_Regina

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:07:44 AM

Posted 29 June 2016 - 02:40 AM

Woud you show the printers datastream all over the internet ?



#13 IT_Regina

IT_Regina

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:07:44 AM

Posted 29 June 2016 - 02:42 AM

The question at start was the problem of viewing all maped printers for terminalserver users, don't you remember?



#14 androbourne

androbourne

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:12:44 AM

Posted 29 June 2016 - 09:04 AM

The question at start was the problem of viewing all maped printers for terminalserver users, don't you remember?

 Yes, terminal server which the original poster did not say anything about it being on an external domain. Just because you have external access to a TS server doesn't mean it isnt on a local network with a local domain....

 

So again, everything I posted is still valid. If he has 5 TS servers on a domain network, my method works and it is actually the recommended method by Microsoft. It would still work outside a domain network. (p2p) with local policy and print management role.

 

Using software causes more points of failure and printer redirection are so 1990, do it right, that is why print management role was introduced and why GPOs are a thing.


Edited by androbourne, 29 June 2016 - 09:06 AM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users