Skip to content

0.Requirements

Scenario

  • HR department needs two printers:

    • Color printer for HR Manager

    • Black & White printer for the rest of employees

  • A specific employee (HR2) must be prohibited from printing

  • All configuration should be done via Group Policy (GPO), not manually

Server & Role Requirements

  • Windows Server with Active Directory installed and running

  • Print and Document Services role installed, including Print Server

Active Directory Requirements

  • OU for HR users

  • Users: HRManager, HR1, HR2

  • Security Groups:

    • HR-Managers → for HR Manager

    • HR-Staff → for regular HR employees

Printer Requirements

  • Two printers added to the server:

    1. HR_Color_Printer → shared, accessible to HR-Managers group

    2. HR_BW_Printer → shared, accessible to HR-Staff group

  • Printer permissions configured:

    • Color Printer → Only HR-Managers can print

    • BW Printer → Only HR-Staff can print

    • HR2 → Deny print on all printers

Group Policy Requirements

  • Two GPOs created and linked to HR OU:

    1. Color_Printer GPO → deployed to HR-Managers

    2. BW_Printer GPO → deployed to HR-Staff

  • Security Filtering applied to each GPO to target only the appropriate group

  • GPO distribution ensures printers are automatically available to users

Client Requirements

  • Users’ devices configured to receive GPO-deployed printers automatically

  • Test login with each user to verify correct printer access