How to isolate printer

[mlock]

Hello i have 3 workgroups and i want to block printer access to all pcs but two.

Lets say

Workgroups

WG-1->7PCs

WG-2->4PCs

WG-3->12PCs

In the WG-1 there is a printer installed to PC-6 and i want to use it only PC-1 & PC-6 (in which its installed with LTP) and no other pc from this workgroup or others.

(All pcs have XP pro)

Thank you!

[+BudMan MVC]

Workgroups are not security groups, they have nothing to do with anything other than where to list computers in the browselist. That is ALL.

Since you do not have central auth, ie a domain you can not use permissions to lock down which accounts have access. Unless where using passthru where the username and passwords matched.

But what you could do is lock down the printer to an account on PC-6 and then only users that auth as that account to PC-6 will be able to use the printer. Or you could put a password on your guest account, and then only users that know the password could auth as guest.

But just because you share the printer does not mean other machines will print to it - they would have to add the printer, etc. If you turned off auto printer discovery.

http://support.microsoft.com/kb/320138

How To Disable Automatic Search for Network Printers and Folders in Windows XP

Another option would be to block assess with a firewall to the printer port - normally 9100, or 515 in LPR mode, depends on how your sharing it LPR, LPD, SMB, TCP/IP, HTTP, etc. Only allow the IP of PC1, etc.

[mlock]

Thank you very much!