I use kix to do something similar for users but the difference is that = they do not move around on me. The process is driven by Windows group = membership. if they are a member of a group, then get certain printers = created, if they are a member of a different group, they get different = printers. If your wan has different subnets, you might be able to do the same = thing based on what the client IP address is. That way they only get = the printers on that subnet. I think Kix will let you do this but I = have never done it myself. They would still be able to manually add and use a different printer if = they know how to get to it but this would stop a whoops from happening = to the wrong location. I hope that makes sense. I can help you with the printer creation and = defaulting in Kix if someone else knows how to check the ip address. more info at www.kix.org Greg -----Original Message----- From: Jason Fiegel [mailto:jason@xxxxxxxxxxxxx] Sent: Tuesday, October 15, 2002 3:40 PM To: windows2000@xxxxxxxxxxxxx Cc: Jason S. Fiegel Subject: [windows2000] Printing Permissions Strategy I am in the middle of a canundrum that stretches my abilities and understanding of Windows 200 Security Structures. I run a 6 site Windows 2000 Native Mode environment. All sites are WAN linked, and have at least their own Domain Controller -- we are = currently (and intend to continue to be) running a single Domain. I have a request from a high level executive to "secure" printers and printing. While all users are mobile with laptops and between sites, the goal is = to limit users to the following: "Any User MAY ONLY print where he is *currently* sitting." I have entertained various solutions -- including scripting for = permissions and printer packet filtering. Can any of you offer thoughts on the best solution? The goal, of course, is to restrict accidental printing of sensitive documents to remote printers. Many thanks. Jfiegel =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm ================================== To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm