Q: Hey All,
Im working on a project and we have two network printers (HP LaserJet 8000ns) currently on a domain that three other domains in our area trust. However, for reasons of security, we trust kill. These two printers are still to be seen by the two networks. There are a few options we think:
1. Buying a parallel port hub, connect both printers via the parallel, the hub and then connect the 3 PCs directly to the two printers on this hub as well (the 3 PCs are all lined up in the same room) .
2. Imagine a quick and dirty network (DC only one network). Add to network. Install a second network of three PCs to the network see the secondary NIC to configure the new network with a DC, and adding the printer to the PC. This still represents a security issues, because if one of those computers gets infected, it can theoretically filter through this small network and filter for all 3 PCs connected, thus filtering to all 3 domains that PCs are a part of.
I hoped that maybe someone a good idea of what we could do it. Even with option number one, does anyone know what hardware can be purchased?
Im hope that someone else has done (sharing a printer between two separate networks that do not trust each other and can not communicate in any event) 0.
Thanks in advance for any thoughts,
Ethan
Re:With no Domain Trust and no IP connectivity, your options are a bit limited.
If you only want to trust three users, you could give the users accounts on the domain where the printers are located, limit their rights to the use of the printers, and have them VPN in to join the network where the printers are located.
Re:Correct, they can't ping the printer.
That's why I was hoping for another option to share this printer.
Sounds like my only options are the two we considered in the top of this thread…
Anyone have anything else I could attempt?
Thanks,
Ethan
Re:well the only thing that really matters is that the server that holds the print queue can reach (ping) the printer – that has to happen before anything else.
From there we can decide on security/domain/trust issues.
If the client and their domain servers can't ping the printer then you are SOL.
Re:Originally posted by: guy
you're network guy is an idiot.
how is the trust even working if there isn't network connectivity?
If both servers can ping the printer you should be all set.
This is what I'm not explaining well enough. Currently, yes, the trust is there. However, we are not only breaking the trust, but we are seperating the networks completely. They will each have their own ip ranges, switches, etc. They will be completely seperate and thus not able to communicate with each other…
Sorry I didn't explain this well enough before…
Am I out of luck? 
Re:you're network guy is an idiot.
how is the trust even working if there isn't network connectivity?
If both servers can ping the printer you should be all set.
Re:OK, I spoke with my networking guru and he said that due to the fact that he will not have a router in place in this location (only a few switches) that this wouldn't work because he can't setup ACL's. So if he were to put the printer at an IP that both of the domains could see, then that would mean both of the domains could see each other as well, and spread viruses over this connection. Since there's no router he couldn't lock down the IP or vlan he puts it in to only certain machines.
Does this make sense? Or am I overlooking something?
Re:Originally posted by: guy
Can you elaborate on this? How would I setup the queue on both domains when the printer has an IP that can only be in one or the other…?
Domain trusts and IP routing are 2 different things….
Re:just create the queues on each domain and then point the queues to the IP address of the printer.
It's just like any other print queue, except it is on two domains.
Re:Can you elaborate on this? How would I setup the queue on both domains when the printer has an IP that can only be in one or the other…?
Re:setup the queue on both domains
0 Comments.