How to restrict access to shared printers in a domain using group policies?

Question

System administration

There is a domain, I am the administrator of the subdomain group. How to make sure that users from other subdomain groups cannot print both when sharing a printer and already on current shared printers. Separately, on each printer, it takes a long time to configure access, there are about 100 printers. Can I somehow create a policy that will leave access to my shared printers only for users of my subdomain group?

Answer 1

Each printer is a separate access group. We add to the group only those users who are allowed to print on it. You can add a department group to a printer group if the entire department sits around the printer.

Answer 2

We need an abstraction at the level of access groups. For example, in a structural unit, employees are included in one group, and several groups of such units are included in another group - which has the right to print on a specific printer.
When expanding access to printers, you need to create only one access group for it in advance and only add it to the print rights. Then you just juggle with workers and groups, you no longer climb to the printer itself and the rights.
I'm afraid that the first time you will need to configure all 100 printers manually.
But in general, such problems are usually overcome by switching to an MFP of a more expensive class. 2-3 pieces are put on the floor and everyone goes to them. At first, they really moan, “oh, how hard it is to lift your butt from a chair, the jacks didn’t give out,” but then they get used to it. This approach is usually more profitable, because. expensive large MFPs save on print costs.