Forum Discussion
Restrict printing to corporate locations
I was approached with the question if we can restrict printing with Intune. We have Intune managed clients where users are Admin, as we only protect the identity (Azure AD Conditional Access, CASB) a...
It looks like you can achieve the objective using ‘MAM policies’, have you tried it?
https://microsoftintune.uservoice.com/forums/291681-ideas/suggestions/11600817-prevent-printout-via-mam-policy
https://microsoftintune.uservoice.com/forums/291681-ideas/suggestions/11600817-prevent-printout-via-mam-policy
- This unfortunately is for mobile OS. I was looking for a solution for Windows.
- You could do that with WIP - https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip
But be aware, the implementation is cumbersome and not straight forwarrd
I try to stay away from it as much as possible- Funny enough, this customer uses WIP and I can confirm its cumbersomeness. It would only work if we used RMS as well though. And then, I think, it would prevent printing on a document level.
What the CISO wants to achieve is to limit printing to company printers. So a user can't print on his printer at home, but can print in the office. I will recommend to use AIP and solve it on a document level.
Meanwhile I might test this out: https://docs.microsoft.com/en-us/mem/intune/configuration/device-restrictions-windows-10#printer
Setting the network printer as default and not allowing adding new printers.
