password protect 4050N connected via jetdirect?

[Eupher]

I just installed a 4050N on my office network. All the workstations that need to use it are configured just fine. But I'm concerned that other users and other departments that I DON'T want to have access could connect. Is there a way to password protect a JetDirect TCP/IP connected printer, or otherwise secure it from unauthorized use? Thanks!

Ken S.

 

[cnthomp]

Under 'Security' in the web interface (

http://addressofyourprinter,)

you can set an admin password that is needed for changing any settings on the printer, or even for creating a port to the printer, at least through standard means. This will not stop users from printing through FTP or LPR, however. The good news is that setting up those kinds of ports takes some technical knowledge, so most users will not even be aware of these options. The location of the security options varies by version of JetDirect, however. If you have any difficulty finding the setting, please reply with the predominant color of the web interface (blue or white/yellow, easiest way to tell what version of JetDirect you have.)

 

[Eupher]

Hi, cnthomp, thanks for the reply. The primary color of the jetdirect web interface is blue. There is a security tab which allows setting an admin password, I didn't realize that this also controlled the ability to create a port to the printer. Wading through HP's KB and help files is not the friendliest way to find info.

What does the community name setting do?

Thanks for the help.

Ken S.

 

[cnthomp]

The Set Community Name is another way to prevent unauthorized changes to the printer's setup. Most of the JetDirect setting changes are done through SNMP, which uses community names to determine if information can be read from or written to the device. By setting a Set Community Name, it means that anyone or any program that wants to change settings on the JetDirect card will have to provide that community name before it will accept them. It can be the same as your JetDirect password, but does not have to be.

 

[Eupher]

Hmmm... I tried setting a password and a community name, but this did not prevent me from creating a port to the printer in either Win98 or XP. The printer, of course, does not show up in the list of shared Windows printers, but if the IP address is known (or discovered through a search), there doesn't seem to be any way of preventing a user from connecting to the printer. What am I missing?

Ken S.

 

[Eupher]

p.s. my version of JetDirect is J3113A

 

[mcall]

checked my 4050s and only way you're going to lock users out of installing a printer is to take away their admin rights.

 

[Eupher]

Yes, that's pretty much what I thought. Not really a problem within my own department - I don't care if anyone there connects. I'd just like the ability to keep people upstairs or in the next building from connecting. Normally not a problem as the printer doesn't show up in Windows shares, and the HP install utility for NT/2000/XP doesn't have a search feature - you need to know the address of the printer in order to connect. The utility for Win98, however, *does* have a search feature and will find all JetDirect printers on the network.

Ken S.

 

[Miker75]

Just a quick question. Are you trying to lock users out from changing settings on the printer/jetdirect? or trying to stop them from actually sending print jobs to the printer?

The results above are to lock users out from changing settings on the printer, not to stop them from actually creating queues on their PC's and sending print jobs.


HP Certified Technician

 

[Eupher]

Miker75, I would like to prevent unauthorized users from creating a port to the printer and sending print jobs.

Ken S.

 

[Miker75]

Okay, that's what I thought. As far as I know there is no way of doing this through the Jetdirect/Laserjet. That job is entirely up to the network OS you have. If you are simply running a windows network (eg. not a domain) then there is no real way of stopping users from using the printer. I know that Novell's NDS tree does allow you to specify which users have access to a printer, and I would assume that Microsoft's Active Directory would have similar functions as well. Not being an expert on Domains either I could not tell you if this was possible, although I would assume so, but this would be a question for a networking guru.

Michael


HP Certified Technician