Forum Discussion

effjaay's avatar
effjaay
Brass Contributor
Mar 07, 2022

Device Control Printer Protection - Blocks Print to PDF

When using the OMA URI policy  ./Vendor/MSFT/Policy/Config/Printers/EnableDeviceControl to block printing via non-corporate printers. It is observed it blocks Print to PDF and Print to XPS function. ...
ctbjm's avatar
ctbjm
Copper Contributor
Jul 18, 2022
We're also experiencing the same issue - I've opened a ticket with MS.
  • TSMasonHQ642's avatar
    TSMasonHQ642
    Copper Contributor
    Jul 19, 2022
    Thank you for the update, i currently have a case open with MS as well.
    • MaximilianMueller1018's avatar
      MaximilianMueller1018
      Copper Contributor
      Oct 13, 2022
      any respond on that? facing the same issue.
      • TSMasonHQ642's avatar
        TSMasonHQ642
        Copper Contributor
        Oct 17, 2022

        MaximilianMueller1018 short answer no help with current OS and build but a little more info below from MS..... 

         

        - If you are using Microsoft Defender for Endpoint Device Control Printer Protection | Microsoft Docs: yeah, ‘print to PDF’/’print to XPS’ is not supported, because of the technical limitation, we can not support this.
        - Because of this gap and several other gaps, we are currently working on a new feature called ‘Printer Protection V2’, which will close this gap.
        - Currently this feature is in private preview.

        - Different from the V1, the V2 includes two parts: media group and policy. You can create any printer groups, e.g. group_1 for USB Printer, group_2 for ‘print to PDF/XPS’, group_3 for network printer. And then you can create policy to restrict each printer group, for example, overall BLOCK but allow group_1 and group_2 in any conditional and allow group_3 if the enduser is using corporate network or VPN. And you can also mark for allowed printer, have file information (file path), even have a copy of the printed file as evidence.

        - V1 is purely powered by OS, but V2 is based on OS and MDE/Defender (passive mode will also work).

        - For the private preview, you will need to install specific Windows 11 build/Windows insider Program, we are currently working on backporting.

Resources