1

Hi this is my problem.
Printer has its own IP but not registered in our domain.
My desktop is registered to domain.
So basically the desktop can print.
The problem is the scan.
I can scan by sharing my forlder to Everyone.
The problem is that all of my officemates can see or access my shared folder.
How can I avoid my officemates seeing my shared folder.
I checked the sharing permission but of course the printer name wasnt there.
Thank you for helping me.

4 Spice ups
2

Add a $ to the share name, this hides it.

\PCname\share becomes \PCname\share$ (hidden).

By using everyone on the share permission, this means exactly that, everyone can access. Because your printer is not a person, it’s best left this way for simplicity for you, but hide the share so people don’t know it’s there.

2 Spice ups
3

Ahh yes, security by obscurity…never fails!

(all funnies aside, that’s what I would suggest, too, short of removing the scan-to-folder function and force scan-to-email instead)

2 Spice ups
4

You could just assign the printer a domain IP address and install it globally.

1 Spice up
5

Don’t share with EVERYONE, just share with the specific users or groups that need access. Set the domain user or a local account as the authentication for the printer to use to scan to the share. An specific account with only access to the scan share is preferred.

The $ to hide from Windows Explorer is not security and it’s easy to list the “hidden” shares. I mostly use hidden shares to have users go through DFS Namespace instead of directly accessing the shares on specific servers.

1 Spice up
6

That would usually require being on the same subnet and switching to WSD to use the scan function instead of RAW that’s just print. I’d prefer to use scan to SMB instead of switching to WSD.

1 Spice up
7

It’s not clear from your post what model printer/scanner you are using, but most of them allow you to provide credentials for a network share. You could create a local user on your PC and set the permissions on the folder/share for just that user.

This all presumes that a) you have local administrator rights on your PC, and b) this is kosher with your IT department…they may not want it to be handled this way.

An alternative would be to configure scans to go via email. Set your internal SMTP relay on the printer/your contact and they will show up in your inbox and stay “private-ish.” This may also require some input from your IT folks.

2 Spice ups
8

Since you likely need “Everyone” due to the dumb nature of the printer I would suggest adding a firewall rule on your computer to only allow SMB (port 445) access from the IP of the printer scanning to your computer. and block SMB from all other IPs (disable the built in rule that allows everyone)

2 Spice ups
9

the funny thing is that one of my officemate can hide or should i say that i cant open his scan folder. meaning he can scan and print without the other users or ‘Everyone’ seeing his shared folder. i mean i can access hi ip address thru file explorer and can see this scan folder however i cant open that shared folder. and that dude dont wanna share how to do it. haha

1 Spice up
10

thank you very much for your reply. i will try this later.

1 Spice up
11

Sounds like the permissions are set correctly on his share.

Neither Everyone nor ‘Authenticated Users’ should need access – instead a valid username assigned access (both NTFS and share permissions) to then save as the username/password in scanning shortcut on the printer.

2 Spice ups
12

Can depend on brand of printer, on HP Enterprise products you can set to only allow the printer to scan to a folder with write only access.

1 Spice up
13

Don’t share with EVERYONE, just share with the specific users or groups that need access. Set the domain user or a local account as the authentication for the printer to use to scan to the share. An specific account with only access to the scan share is preferred.

1 Spice up