IBM Security MaaS360

 View Only
Expand all | Collapse all

Restrict Printing on Windows 10 Devices (Laptops/Surfaces)

  • 1.  Restrict Printing on Windows 10 Devices (Laptops/Surfaces)

    Posted Thu September 02, 2021 06:26 PM

    Wondering if anyone has had success in restricting printing on Laptops and Surfaces? Our desire is to block printing to only authorized .net devices or networked printers. We want to prevent AirPrint printing to any Wi-Fi printers or non-authorized devices. In working through all the settings, we are only finding this ability in iOS and Android devices, not in Windows 10 laptops. Thoughts?

     

    Thank You, Bob

     

    Bob Yeager

    I.T. Project Manager

    Harborstone Credit Union

    Direct or Fax: (253) 583-8685

    Phone: (253) 584-2260 or 1-800-523-3641

    Visit us online at  harborstone.com

     




    CONFIDENTIALITY NOTICE: Harborstone Credit Union respects your Internet privacy and would like to remind you that the confidentiality of Internet e-mail cannot be guaranteed. Do not include private or confidential information such as passwords, account numbers, Social Security numbers, etc., in e-mails to Harborstone Credit Union. This communication is only for the person(s) named above and may contain information that is confidential, privileged or exempt from disclosure under applicable law. If you are not the person(s) named above be aware that disclosure, copying, distribution or use of this communication is strictly PROHIBITED. If you have received this communication in error please notify us by reply e-mail.


  • 2.  RE: Restrict Printing on Windows 10 Devices (Laptops/Surfaces)

    Posted Tue September 14, 2021 05:43 AM
    Edited by Eamonn O'Mahony Tue September 14, 2021 08:36 AM
    Hi Bob
    Apologies for delay, just back from annual leave.
    AirPrint is an Apple proprietary technology meaning that any printer capable of receiving an AirPrint communication can communicate to such a printer. Because this is for iOS and MacOS devices only you won't see policy controls for other device types. 
    If printer setup is performed at app level the only way to block this is to use App Compliance with Block-list for specific App ID's. 
    However if you need a native control the question is whether the platform editor has provided the control, and whether we have implemented it. 
    Android depends on custom apps from printer manufacturers (search in Play Store) but you have also seen that this exists for Android devices which are enrolled into Android Enterprise in Device Owner (DO) mode.
    Windows PC while can either have pre-installed printer drivers (included in OS image so available from installation), but there are also proprietary printer apps which can be installed from the Microsoft Store. 
    At a native OS level for Windows (on policy), I'm not seeing controls on policy which can allow or disallow printing. I'll check with Product Manager to see whether Microsoft has already provided this, and whether we have implemented it. 
    You may want to consider that DLP (Data Leak Prevention) settings may be appropriate here if you are looking to ensure that corporate data does not 'leak' to unauthorised locations. If this is the case you may be well to consider containerisation within MaaS360 (if the Mail client / Browser / Document Viewer-Editor are included in your licence level). In addition for Android you have the DO level setting which is a Google approach, and as Microsoft have a slightly different approach in that they use platform-level configurations such as Azure Information Protection. Please let me if you need any more information about these solutions. 
    Best

    ------------------------------
    Eamonn O'Mahony
    Technical Client Success Manager
    IBM Security
    Dublin, Ireland
    ------------------------------