Block computers from network printer access.

[Relztrah]

I need to block certain workstations from having access to our HP2600N network printer. I looked through the network settings in the HP Toolbox and didn't see any way to do this. Of course I can uninstall the printer from those computers, but then somebody can just re-install it. Is there a way to block certain IP or MAC addresses from accessing this network printer? We're all in the same workgroup using Windows XP Pro.

Thanks

[mjc]

Easily?

Probably not...probably have to insert a switch/router between the printer and network to allow filtering. I don't ever remember seeing that as a native option for the HP network printers.

[Variable]

Given your set up, it sounds like you have access to their machines? Open the command line and add a static route for the printers IP and send it to a non existent IP

route add -p 192.168.1.10 mask 255.255.255.255 10.1.1.1



where 192.168.1.10 is the IP of the printer and 10.1.1.1 does not exist.


They probably will never figure that one out.

[mjc]

But don't you have to do that at each machine in question...either remote access or at the machine itself?

If the number of machines is small that would probably be easiest...

[Variable]

Yes, the route would be added to those machines that should not have access to the printer.

[yawningdog]

How about this.

Deny the users access to the shared printer in sharing and security. Then configure local security policy to deny loading printer drivers on the machines that you want to deny access to.

[mjc]

All of the above?

[Variable]

It is a network printer... sharing and security wont work. If it was plugged into someones machine and then shared yes. But it is plugged in to a switch or the problem would be easy to solve.

[Paul Komski]

Am I missing something or would blocking its outward IP address in a software firewall not do the trick? A password protected firewall if necessary.

[yawningdog]

I was thinking the same thing Paul K. But Windows firewall only blocks incoming connections. Disabling file and print sharing for a particular IP address might work after all, but it seems an ungraceful solution and may not work since it's an outgoing connection. It's also kind of a pain because you have to enable all devices you want to allow instead of disabling the one you don't want.

Someone check me, don't you still need a driver to add a network print device?

[yawningdog]

I was thinking the same thing Paul K. But Windows firewall only blocks incoming connections. Disabling file and print sharing for a particular IP address might work after all, but it seems an ungraceful solution and may not work since it's an outgoing connection. It's also kind of a pain because you have to enable all devices you want to allow instead of disabling the one you don't want.

Someone check me, don't you still need a driver to add a network print device?

[Paul Komski]

In suggesting the blocking of outward connections, it was implicit that a 3rd Party firewall should be used.