By default, Remote Desktop Services (RDS, formerly known as Terminal Services) allow local printer redirection, where the user's local printer(s) show up as available printers in their remote desktop session. I realize it's possible to turn off this feature entirely, or (through group policy) for select computers or users in your domain.
However, is it possible to configure this to do the reverse? To have the RDS configured to NOT allow local printer redirection by default, but then enable exceptions to this rule via policy for those few people who are trusted to use local printers?
The reason for this question is that we want to enable our employees to use our Web-App enabled RDS applications from their home computers, but only want to allow local printers to work for people inside our corporate firewall.
We have both Windows Server 2008 and Windows Server 2012 RDS/Terminal Servers involved at our site (neither are R2).
