topic Re: Can we restrict printers from a VIEW virtual desktop? in Horizon Desktops and Apps

Can we restrict printers from a VIEW virtual desktop?

don1304 — Tue, 27 Mar 2012 20:57:05 GMT

Can we restrict printers from a virtual desktop in View enviornment ? As we want to restrict all remote users to restrict printing from local printer and network printers.

Re: Can we restrict printers from a VIEW virtual desktop?

bradstaenglen — Thu, 29 Mar 2012 17:58:28 GMT

When you install the View Agent on to the desktop, don't install virtual printing and this should take care of it!

Re: Can we restrict printers from a VIEW virtual desktop?

don1304 — Thu, 29 Mar 2012 19:00:46 GMT

Thanks , Does this restrict only USB printing ? OR both Network printing and USB printing ?

Re: Can we restrict printers from a VIEW virtual desktop?

vSolid — Thu, 29 Mar 2012 19:03:30 GMT

Yes you can, but you need to create a pool and then create a VMs in VLAN in vsphere env

And then let network team to create a rule for this VLAN to assess to some share ip printers

Sent from my iPad

Re: Can we restrict printers from a VIEW virtual desktop?

bradstaenglen — Thu, 29 Mar 2012 19:10:12 GMT

Disabling Virtual Printing blocks any printers already on the local machine and should prevent the addition of other printers. I am uncertain about the USB printer being blocked by this, we dont allow USB via GPO so it isn't an issue in our environment :smileyplain:

Re: Can we restrict printers from a VIEW virtual desktop?

cmartin24 — Fri, 27 Sep 2013 12:23:50 GMT

I believe what you may be asking is...we have some printers - BUT, we don't want all of them to be redirected in a View session - just certain ones..? I have the same issue and the problem is I don't have access to the client printers. Has anyone found a possible solution for this? Perhaps a script to run after the user logs in that deletes the printers that you want to restrict.

Re: Can we restrict printers from a VIEW virtual desktop?

btrabue — Mon, 30 Sep 2013 17:17:38 GMT

I found the following login script (untested) that will check to see if the user is connecting from outside the office and if they are a member of a certain AD group. If all passes then they are allowed to print. If you wanted to disable all external USB printing then just disable the TP Autoconnect Service and the TP VC Gateway Service and they will not be able to print to any type of USB printer including label printers.

strComputer = "."
Set objNetwork =
WScript.CreateObject("Wscript.Network")
Set objSysInfo = CreateObject("ADSystemInfo" )
strUserDN = objSysInfo.userName
Set objUser = GetObject("LDAP://" &
strUserDN)
Set objWMIService = GetObject("winmgmts:\\"
& strComputer & "\root\cimv2")
Set objShell = CreateObject("WScript.Shell")
'--------------------------------------------------------
' IsMember Function
'--------------------------------------------------------
Function IsMember(strGroup)
' Function to test one user for group membership.
' objUser is the user object with global scope.
' strGroup is the NT Name of the group to test.
' objGroupList is a dictionary object with global scope.
' Returns True if the user is a member of the group.
Dim objGroup
If IsEmpty(objGroupList) Then
Set objGroupList =
CreateObject("Scripting.Dictionary" )
objGroupList.CompareMode = vbTextCompare
For Each objGroup In objUser.Groups
objGroupList(objGroup.sAMAccountName) = True
Next
End If
IsMember = objGroupList.Exists(strGroup)
End Function
'--------------------------------------------------------
' Check to see if client logged into external View
Connection Servers
' Disable printing if not member of AD Group
remote-printing-allowed
'--------------------------------------------------------
If
objShell.ExpandEnvironmentStrings("%ViewClient_Broker_DNS_Name%") =
"GR1VCSV01.domain.net"
_
Or
objShell.ExpandEnvironmentStrings("%ViewClient_Broker_DNS_Name%") =
"GR1VCSV02.domain.net"
_
Then
If IsMember("remote-printing-allowed") Then
echo "Virtual Printing Enabled"
Else
Set colServiceList = objWMIService.ExecQuery _
("Select * from Win32_Service where Name =
'TPAutoConnSvc' OR Name = 'TPVCGateway'")
For Each objService in colServiceList
If objService.State = "Running" Then
objService.StopService()
Wscript.Sleep 5000
End If
errReturnCode =
objService.ChangeStartMode("Disabled")
end if
end If