Disable Printing via GPO / Intune

Question

question

OliverLennox-4187 asked Mar 1, '21 DaisyZhou-MSFT commented Mar 3, '21

Disable Printing via GPO / Intune

Hi there,

We have an educational customer with all devices controlled via Intune. Students have the ability to print to the school printers but in some cases the students are abusing this privilege and wasting paper and toner. We would like the ability to create a restricted printing group and be able to move student users into this group if they can't be trusted with the printers. Students use shared devices so it is important that the policy is removed again when a new user logs into the device.

Is there a GPO or Intune policy that would allows us to disable all printing functionality for our restricted printing group? Could anyone point me in the right direction?

Thanks

Olly

windows-group-policy mem-intune-device-configurations

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2021-03-01T18:01:21.423Z

EswarKoneti-MVP answered Mar 1, '21 OliverLennox-4187 commented Mar 1, '21

AFAIK, There is no native solution with Intune to disable the printing unless you disable the prints spooler service but again, if the students have local admin rights, they have enable the service and print it.

Thanks,
Eswar

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

OliverLennox-4187 · Mar 01, 2021 at 09:55 PM

Hi Eswar, actually our users are not admin so maybe disabling the spooler service could work. If I created an intune script to disable the service (or re-enable it for standard users) would that work?

0 ·

Answer 2 · 2021-03-01T19:54:12.887Z

Jason-MSFT answered Mar 1, '21

Printer management is not really a function of Windows and so there nothing in Intune for this either (because Intune manages Windows). I suggest you explore a printer management tool like Universal Print: https://www.microsoft.com/en-us/microsoft-365/windows/universal-print

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 3 · 2021-03-02T06:30:15.327Z

DaisyZhou-MSFT answered Mar 2, '21 DaisyZhou-MSFT commented Mar 3, '21

Hello @OliverLennox-4187,

Thank you for posting here.

Not sure how you deployed the printer.

If you deployed printer similar as the following link (GPO), we can remove the user or add the user via Item-level targeting.

How to Deploy Printers to Users or Computers via Group Policy?
https://theitbros.com/deploy-printers-in-domain-group-policy/

If you deployed printer via shared printer, we can shared the printer to one group (you can add or remove the user depending on your need) instead of everyone.

Hope the infromation above is helpful.

Should you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou

user.png (62.3 KiB)

· 2

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

OliverLennox-4187 · Mar 02, 2021 at 10:08 AM

Hey Daisy, unfortunately the printers were deployed using an Intune script and the devices are all Azure only so we don't have an option of setting the Group Policy in this way.

0 ·

DaisyZhou-MSFT OliverLennox-4187 · Mar 03, 2021 at 08:46 AM

Hello @OliverLennox-4187,

Thank you for your update.

So we may need to ask engineers from Intune or Azure, I am from local AD DS team.

I suggest you can post again by selecting Intune and/or Azure tag.

Thank you for your understanding and support.

Best Regards,
Daisy Zhou

0 ·

question