Forum Discussion
effjaay
Mar 07, 2022Brass Contributor
Device Control Printer Protection - Blocks Print to PDF
When using the OMA URI policy ./Vendor/MSFT/Policy/Config/Printers/EnableDeviceControl to block printing via non-corporate printers. It is observed it blocks Print to PDF and Print to XPS function. ...
TSMasonHQ642
Jul 19, 2022Copper Contributor
Thank you for the update, i currently have a case open with MS as well.
MaximilianMueller1018
Oct 13, 2022Copper Contributor
any respond on that? facing the same issue.
- TSMasonHQ642Oct 17, 2022Copper Contributor
MaximilianMueller1018 short answer no help with current OS and build but a little more info below from MS.....
- If you are using Microsoft Defender for Endpoint Device Control Printer Protection | Microsoft Docs: yeah, ‘print to PDF’/’print to XPS’ is not supported, because of the technical limitation, we can not support this.
- Because of this gap and several other gaps, we are currently working on a new feature called ‘Printer Protection V2’, which will close this gap.
- Currently this feature is in private preview.- Different from the V1, the V2 includes two parts: media group and policy. You can create any printer groups, e.g. group_1 for USB Printer, group_2 for ‘print to PDF/XPS’, group_3 for network printer. And then you can create policy to restrict each printer group, for example, overall BLOCK but allow group_1 and group_2 in any conditional and allow group_3 if the enduser is using corporate network or VPN. And you can also mark for allowed printer, have file information (file path), even have a copy of the printed file as evidence.
- V1 is purely powered by OS, but V2 is based on OS and MDE/Defender (passive mode will also work).
- For the private preview, you will need to install specific Windows 11 build/Windows insider Program, we are currently working on backporting.
- SecD3Nov 10, 2022Copper Contributorany ETA on public availability?
- MaximilianMueller1018Oct 18, 2022Copper Contributor