Hi I have a Windows 2008 R2 server with Windows 7 workstations in a school environment. I have an organisational unit called 'ICT Suite' with all ICT computers in them.
In the ICT Suite are 2 printers. I have allocated these printers via gpo to the 'ICT Suite' OU which works fine. However, the Headteacher would like me to go one step further and prevent anyone outside of the ICT Suite to print to these printers.
I have unsuccessfully tried the following. Remove the everyone group from the printers security permissions. Created a global group called 'ICT Computers' (with all the ICT computers as members), and provide print access. unfortunately, this just prevents everyone from printing to the printers.
Is this achieveable?