Connecting computer with no internet connection to network printer

I have 3 computers that are connected to internet and are also connected to network printer. I have another computer that has financial data. In order to prevent any copying, I want to turnoff internet and block all USB ports on this 4th computer but still want to allow user to print on the network printer.
Printer has only one port for installing Ethernet connection and I do not require wireless printing for any of my computer.

Thanks in advance for your help

Options: Move the financial computer closer to the printer and connect the printer manually through a USB port / disconnect this computer from the network by removing the Ethernet cable and disable any wireless adapters.

Option: By a separate stand alone printer for the financial computer.

Option: Block all internet connectivity using the Windows firewall, but allow printing to the network printer.

Things to consider...hope it helps.

Thanks, there is no USB port on the printer. Can I connect all computers by network cable and printer to a network switch, that is not connected to internet

dk1971 said:

Thanks, there is no USB port on the printer. Can I connect all computers by network cable and printer to a network switch, that is not connected to internet

Yes you can. BUT, if any of these computers are connected to the internet at the same time, then there is always the possibility that someone could connect to your financial computer through the network.

Truly the only safe way to prevent accidental access is to make it a stand alone computer with its on printer. Printers are cheap these days...just saying. Anyway, let us know what you decide to do.

dk1971 said:

Thanks, there is no USB port on the printer. Can I connect all computers by network cable and printer to a network switch, that is not connected to internet

I would think if the 3 computers are assigned a different workgroup name and Subnet number than the Financial Data Computer, that it is unlikely it can be accessed via one of the other computers from the Internet but buying another printer and using USB and having no Ethernet connection to the outside world ( also known as an AirGap ) is the safest way to go especially if you are not a Network Expert, and you have highly valuable Data to protect.

bro67 said:

any computer can still be accessed with portable tools or even using the proper commands. There is nothing safe if you are using a home network that is not a managed system using VLAN's.

Nothing is 100% safe , given time and expertise, someone could do it, which is why I suggested if the OP isn't an expert to go with a USB connected printer and no Ethernet if the Information is highly valuable. Physically restricting access is alot harder of course , though newer MB's allow for turning off of USB ports now.

There are many, many ways of doing this.

One way is using the pc's firewall. Go in to the firewall, advanced settings, in both inbound and outbound rules look for the software you want to block - for example Microsoft Edge. Select properties and change to "block the connection". If there aren't any rules for the application you want to block then create one in both incoming and outgoing using the New Rule selection. In this way you can disable access for Browsers, but leave Update and so on running. There really aren't that many things you need to block.

You could also use a toggle application to switch the internet off ( try Internet Off ) then you can readily switch it back on when you want to allow update. Just place the toggle app in a folder only you know about or can access.