How can a user be prevented from avoiding the monitoring service by printing directly to a network printer?
- To correctly monitor a network-attached printer, the print server assigned to this printer should be the only network device that is granted access to it.
- Most network-enabled printers have some form of configuration page that allows access restrictions to be placed, this could either be a restriction on the IP or MAC address that it will allow communication from.
- Using the Windows printer-sharing feature, network users can then be granted access to this printer but only via the configured print server.
- Some network-enabled printers may operate different protocols other than the standard TCP/IP, ensure that these are disabled to fully ensure that unauthorized access is not granted.