How to configure certain users to print to specific PrinterOn printers? - c06604074
Using the steps below the administrator of the PrinterOn Enterprise solution can define which printers users are able to print to based on Active Directory Organizational Units (OU) or Groups.
- Login to the PrinterOn Configuration Manager
- Create printer departments, then sort the printers to the printer departments
-
Assign LDAP/AD user groups or OU's to the
PrinterOn
printer departments (Both OU and Groups cannot be selected together, either one or the other.)
- Select the Authentication tab on the PrinterOn Configuration Manager
-
To configure based on LDAP/AD Groups
- Change User Rules and Printer Access to Group, then click Apply Settings
- Select Manage User Rules
- Enter a value in the Rule Name field (define a value that will easily identify which users are listed, [ e.g. Sales Users NA])
- The PrinterOn Configuration Manager will attempt to retrieve the LDAP/AD Groups that exist within the directory (this is most times not possible because it takes a long time to pull all the group information and make them available)
- Select Group: If the drop down is not available to select the LDAP/AD group, define the group based on the distinguished Name [ e.g : CN= Users,DC = us,DC = printeron,DC =com]
- Linked Printer Departments: Check the box next to the PrinterOn departments (includes the PrinterOn printers) that will be available to the users that are part of the LDAP/AD Group
- Select Apply Settings to save the changes
-
To configure based on LDAP/AD Organizational Unit:
- Change User Rules and Printer Access to Organizational Unit, then select Manage User Rules
- Enter a value in the Rule Name filed (define a value that will easily identify which users are listed, [ e.g. Sales Users NA])
- The PrinterOn Configuration Manager will attempt to retrieve the LDAP/AD Organizational Units that exist within the directory (this is most times not possible because it takes a long time to pull all the OU information and make them available)
-
Select OU: If the drop down is not available to select the LDAP/AD OU, define the OU based on the distinguished Name [
e.g
: (OU=Distribution
Groups,DC
=
us,DC
=
printeron,DC
=com)]
By selecting the Recursive option, users underneath that OU will also be restricted to only the printer departments selected - Linked Printer Departments: Check the box next to the PrinterOn departments (includes the PrinterOn printers) that will be available to the users that are part of the LDAP/AD OU.
- Select Apply Settings to save the changes
- Select Apply Settings to enable the settings for LDAP/AD authentication
-
Navigate to the web submission page and login with the user
account, and
validate that based on the previously defined rules above the user account is able or not able to see the various printers.
Guest Printer Considerations - 2 options- Omit guest printers from any Printer Department configuration
- Create a Guest Printer Department and ensure that no rule is defined to give access to that department for internal, identified users.
Real World example with Guest Printers:
Sales printer department contains Printer 1 & 2
Sales OU has access to this printer department only. When signed in as a sales user, only printer 1 & 2 are shown.
Figure : Sales printer department contains Printer
Marketing printer department contains Printer 4
My Marketing OU has access to this printer department only. When signed in as a marketing user, only printer 4 is shown.
Figure : Marketing printer department contains Printer
Guest printer department contains Printer 3
No rule is set to give access to this printer department. When signed in as a Guest user, only printer 3 is shown.
Figure : Guest printer department contains Printer
Admin OU has access to “all”
When signed in as an admin user, printers 1, 2 & 4 are shown.
Figure : Signed in as an admin user
NOTE:
Applies to PrinterOn Enterprise 3.x and later.
Please note multiple rules can be defined and assigned to various OU's or Groups, the most restrictive rule will apply to the users who authenticate.
If a user that is printing through the solution is not part of any rule that has been defined, they will have access to all non-guest printers, assuming the above Guest Considerations have been followed.