How to block all Printing using Endpoint Protection (SEP)

Products

• Endpoint Protection

Issue/Introduction

How can you prevent Windows from printing both locally and on the network?

Environment

14.x

Resolution

For all print jobs, whether local or network, Windows uses Spoolsv.exe. Add this to blocked applications in order to halt any print job.

1. In the SEPM console, go to Policies > Application and Device Control Policy.
2. Click on Application Control and click Add at the bottom of the rule set list.
3. Click Add under Apply this rule to the following processes.
4. Use the following path, and click OK to save the new policy:
   C:\Windows\System32\Spoolsv.exe